IT controls - General vs Application Controls

In this video I explain the difference between general IT controls and application IT controls.
#InternalControls #ITControls #Auditing
My ultimate audit video study guide is available here
amandalovestoaudit.com/learni...
Subscribe to watch more auditing videos
/ amandalovestoaudit
Catch me on social media!
/ amandalovestoaudit
/ amandasaudit
/ amandalovestoaudit
Camera - Sony A6500 + 28mm, illustrations captured on Explain Everything on the iPad Pro
Mic - Rode SmartLav+
Monitor - SmallHD Focus
Lighting - Aputure 672S, Aputure AL-MC

[@Parmindersingh-rk8cd]

Normal it general controls are categorised into domains: 1. Access: to application, to servers, to data centers 2. Changes in Inscope Application and related infrastructure: if there any code changes performed in the application, or if there any such changes in the application which changes the functioning of the application (like changing the tax rate on any product), patches applied in the application, security patches made on the servers, 3. Security: testing of Firewall, antivirus elements 4. Other IT Operations: Scheduled jobs, interfaces, Backups, Incidents

[@amandalovestoaudit]

Hi Parminder - thanks for sharing this :)

[@143fromRose]

This video couldn’t have come at a better time! Currently studying this topic this week! Thank you so much!!

[@amandalovestoaudit]

Great! Happy studies 😊

[@xosharonnoelle7]

Recently found your channel and have my uni audit exam next week! Thank you so much for these videos, they are so helpful and well made!

[@Tony-bc1rr]

This is such an fantastic video with clear explanation and examples. Absolutely loving it! Keep it up Amanda will follow the channel!

[@amandalovestoaudit]

Thanks Tony!

[@abdulwahabalhaji8662]

Thank you so much for this video! I'm interviewing for IT Risk Consultant this week and this clarifies things for me a lot.

[@thres34]

One year on, did you get the job?

[@abdulwahabalhaji8662]

I DIIIIIID and I’m a senior now!!!!

[@funnyclips4045]

@@abdulwahabalhaji8662 hmdl 🤲🏽

[@mrmindstorms]

Hos do you like it? :) I have my last interview tomorrow, but Reddit says it’s really boring and few exit opportunities

[@abdullahaljalil5218]

This is my second presentation today Lots of appreciations for the these valuable videos 👍

[@snb1143]

Thanks I really loved that video, I was really struggling with general v application controls, now all is clear.

[@amandalovestoaudit]

Great to hear!

[@shaistahsayedally9364]

Hi Amanda. This video is really good. Can you break this down further into the 6 general controls (control environ, system development,access control, continuity, system software and doc)? Enjoy your style of lecturing. Everything fits into perspective with the videos you do.

[@ttjordan81]

Ha, when you got to the LMS part, literally a relational DB scheme I created years ago... 😍

[@amandalovestoaudit]

They haven't changed!

[@mustafa7amin7]

👍Thank You very much for great video and answering my question. Your way of explaining is great to understand easily within shortest time 👍

[@amandalovestoaudit]

You’re welcome Mustafa!

[@MrKwabenajames]

Amanda, it was amazing. Great job

[@amandalovestoaudit]

Thank you Kwabena - good luck in your studies :)

[@thabangmahlangu1484]

Thank you so much, you just contributed to my exam success.

[@amandalovestoaudit]

Good luck in your exams Thabang!

[@tejumadeajoke9674]

very insightful and easily illustrated

[@amandalovestoaudit]

Thanks!

[@staceturner3442]

Thank you, this was very informative!!!

[@amandalovestoaudit]

Thanks Stace!

[@sunubishwokarma1002]

Great explanation, thank you so much.

[@neginitin8255]

Beautifully explained in simple language

[@nosisagagai262]

Great video Amanda☺

[@madhavkikahani]

Hey Amanda..your way of teaching is just wow...can you please upload video on HIPPA with complete understanding from zero to hero

[@amandalovestoaudit]

Hey - I don't know much about HIPPA (if you mean the healthcare privacy law) - sorry!

[@JoMmEKiSs]

So wonderful thank you so much. You are great teacher

[@amandalovestoaudit]

You’re welcome Jome! 😊

[@paulramalepe]

Thank you so much... but I want to understand the ICT controls in Revenue and receipts cycle!!! It confuses me big time.

[@yositasunintaboon4455]

thank you so much for sharing this helpful video

[@amandalovestoaudit]

You're welcome Yosita!

[@RS-ws5lh]

Hiii ur videos are superb, will u do a video on socq type2 audit

[@ceaseuno1]

Thank you for the video. Do you have a video on sampling IT general controls?

[@amandalovestoaudit]

Hi - not yet - when sampling, the key is going to be sampling over the entire year

[@JAFFER3657]

Thank You for this video and also to the person who requested this video, It helped a lot.

[@amandalovestoaudit]

You're welcome Syed!

[@DollFacePeter]

“Dr Amanda” That flexxxxxxx

[@amandalovestoaudit]

I *think* that’s a compliment - thanks 😊

[@marwanmilan811]

Would you clarify the role of a group financial controller

[@poonampatil7800]

Thanks for clarification 🙏🏻

[@sahilkhan2470]

Thank you, this is very clear. Even my 100 euro's of textbooks can't explain like you do. gr from Amsterdam

[@damibabz4100]

Thanks, this is great

[@fadihijazi1658]

you're awesome, thanks!

[@amandalovestoaudit]

Thank you so much Fadi 🙏☺️

[@davidesintini6708]

Niceeeee!!! What about making a video where you explain the differences between an audit of private and public company? Keep up the work!!

[@viviannevi7164]

Kindly do a video on cloud accounting and/or share a link where one can get more insight on what it is and how it works, pros and cons etc. Thank you in advance.

[@amandalovestoaudit]

Hey Vivianne Definitely check out Heather Smith for everything cloud accounting. She has a great website and be sure to sign up for her newsletter kzbin.info

[@jessblack9110]

I need to get some more info from you are you free to go for 30 minutes

[@yuqianzhao6567]

really helpful...thanks a lot！！！！

[@amandalovestoaudit]

Thanks Yuqian! Don’t forget that I have a full study guide of videos on my website - amandalovestoaudit.com/learning-resources/audit-study-guide/

[@amitsalekar1433]

How can you relate the IT controls with IT Audits

[@mrbeansprout562]

Can I ask some question? for access into organization network (Internal Network) >> ITGC but access into each application (e.g. internal application) and some time we use different credential form internal network can we call IT application control? So,if focus in application >> call Application Control right?

[@amandalovestoaudit]

Yes - focus within an application is an Application Control

[@mikewang8479]

您的英语讲得真好！

[@amandalovestoaudit]

Hi Mike - unfortunately I can’t read Chinese characters!

[@nagendrabijur]

Batch Jobs scheduled in an application, do they come under ITGC's or ITAC? (add/modify/delete critical scheduled jobs or interfaces between in-scope SOX system)

[@amandalovestoaudit]

Batch jobs within an application would be an Application Control ☺️

[@nagendrabijur]

@@amandalovestoaudit thanks for the clarification and Quick reply!😁

[@EvaSlash]

Do you have any tips for an IT Audit SOX interview? How to impress and stand out?

[@amandalovestoaudit]

Hi Gib Gob - do you mean going for a job in IT Audit/SOX? Or do you mean interviewing clients? I presume it is the latter - know your potential employer: * what sort of companies do they audit? * check out the SOX 404 reports on some of those companies - what are common issues that fall under the IT category? (rather than the manual category) * how would you go about detecting those sorts of major deficiencies And the final one - make sure you have at least 1 question for your employer that shows you want to know whether you fit in at their organisation - that may be about clients, location, travel, advancement, culture, diversity & inclusion. Good luck!

[@busolaoshideko8680]

@@amandalovestoaudit Insightful. Thank you

[@nhlovukophilosophy6975]

Greetings,can you please highlight which aspects to dwell much on when coming to computer auditing?

[@amandalovestoaudit]

Hi Edward - I’m unsure of your question. Do you mean when you are studying computer audit? Or when you are auditing a client’s systems?

[@nhlovukophilosophy6975]

@@amandalovestoaudit on both aspects, and how to go about the subsequent events as an Auditor?

[@amandalovestoaudit]

Hi Edward - auditing computers are like auditing any other process - understand the internal controls, identify the control activities, test the controls for effectiveness. As for subsequent events - I have 3 videos on this topic A strategy for answering subsequent event questions kzbin.info/www/bejne/n2LRi2ahZapngLM Subsequent events - some worked examples kzbin.info/www/bejne/pqeQq5ikds-HfbM Interpreting the Auditing Standard on SUBSEQUENT EVENTS ISA/ASA560 kzbin.info/www/bejne/fl61ZH-tfdyXjMk

[@arvindiyer4578]

Can you explain , what is configurable and Non Configurable Controls and explain with an example

[@amandalovestoaudit]

Hi Arvind - the teacher in me always asks a question first. What do you think the difference is? Give it a go and then I’ll happily provide some guidance based on your response ☺️

[@jusappia1580]

Thank you

[@amandalovestoaudit]

You're welcome Jus - thank you for watching :)

[@ntcuong01ct1]

Dear Friends, I have a question about internal control: 1/ I think internal control (IC) are activities that identify risks and frauds occurring in business processes and financial reports. After the IC (internal control) department detects risks, it will propose to management levels or the Board of Directors to identify risks and handle them. Question: Am I understanding this correctly?, I hope you can answer and add more. Thank you.

[@thekingoftheboxleton]

How do you manage not to say "um" when you are speaking?! Great job.

[@amandalovestoaudit]

Lots of practice - but I still do it occassionally! Trying to speak too fast also can cause ums. I think in this video I wrote a script and used my teleprompter!

[@thekingoftheboxleton]

@@amandalovestoaudit thanks for your content. I am just at the bottom rung of aca doing assurance and your vids proper help!

[@TheVivacious01]

pause instead of saying um

[@ibnal-yemen2063]

Very nice. 🌹

[@amandalovestoaudit]

Thank you! 😊

[@berosar]

Nice

[@Phsoco]

I understand this video is old, however, is it correct to assume applications like email filters/blockers that are add-ons for other applications are considered General IT controls as opposed to IT Application Controls? I'm assuming it's General because it's not programmed into the application, but rather an add-on.

[@AwesomeIcer9000]

My textbook also mentions ‘user controls’, what is that exactly?

[@amandalovestoaudit]

User controls are those related to guiding user behaviour. Does it refer to computer end user controls? www.prweb.com/releases/2004/12/prweb185286.htm

[@peterc.7841]

is this about Sarbanes Oxley?

[@amandalovestoaudit]

Hi Peter - not specifically. SOX does require you to report on any material deficiencies in internal controls - but this video is just about the difference between 2 types of IT controls - application and general. SOX requires you to look at all controls - manual (done by people) and IT

[@vuyitumelomabunda8293]

I salute🤙

[@cuss1874]

i need help for my task:(

[@pearlczworld]

Amanda, what is a BSO test?

[@amandalovestoaudit]

Hi - I don’t remember mentioning that in the video ... or do you mean generally?

[@pearlczworld]

Amanda, thanks for responding. I had someone at work ask me this and dont know what they were referring to. what kind of test is it?

[@amandalovestoaudit]

Ok - it is something I’ve actually never heard of before! I will ask around and see if I can help - it might be something specific to your audit firms

[@rousyamigo4278]

Dear Amanda how to check for back up ?

[@amandalovestoaudit]

Asking about the process, see if they’ve done any restorations from backups (usually this process needs to be documented and signed off by mgmt). You can’t usually physically/actually test the backup

[@rousyamigo4278]

@@amandalovestoaudit Thank u so much

[@karabondlovu6528]

Hello I'm asking for an assistance relating to General control vs Application control

[@amandalovestoaudit]

What sort of assistance?

[@karabondlovu6528]

I was trying to send the document but I couldn't I was asking for you email so that I can share the document

[@funnyclips4045]

@@karabondlovu6528 I am sorry, but that seems a bit shady. Just ask her the question instead of sending documents?

[@jmn1238]

I would think the app controls are more interface controls rather than SOD

[@amandalovestoaudit]

There are many that are likely to be both

[@Tokollo_]

🤣im in my final year and I still have to remind myself now and then about the difference between these 2.The line that differentiates them is too thin its easy to mix them up

[@buyiemsane3446]

1 2 3

[@80dakka]

Hello , please if u can help as I am new IS Auditor need some Authorised SW's of the below: Transaction logging  Query tools  Statistics and data analysis (CAAT)  Database management system (DBMS)  Data warehouses, data marts, data mining  AI  Embedded audit modules (EAM)  Neural network technology  Standards such as Extensible Business Reporting Language (XBRL)

[@amandalovestoaudit]

Hi Bo - I’d check out Auditnet.org - this is a great resource for practitioners.

[@gauthapandith]

Sometimes it may be correct to say that Auditing is an art not having any logical approach and only limited by your imaginations as no answer is right or wrong !

[@dennisafariogun1658]

1

[@user-zj8dp8ue1z]

「上記のギフトのいずれかを選択できます」、

[@nitishdash4850]

Best at 1.25x

[@Kris-bb4oy]

crykey mate