IT General Controls (ITGCs) - In-Person
Enhance IT Governance and Compliance with Expert Training on IT General Controls
Join the Information Technology General Controls (ITGCs) – In-Person CPE Training Event and empower yourself with the skills needed to strengthen digital governance and ensure robust IT compliance. Designed for professionals who aim to expand their understanding of IT risk management, this engaging 8-hour course offers critical insights into setting up and maintaining effective IT general controls using recognized frameworks such as COBIT. Earn 8 NASBA-approved CPE credits while gaining actionable knowledge to secure and optimize IT processes in your organization.
Why Attend?
Earn 8 CPE Credits - Fulfill your professional development requirements while mastering essential principles of IT governance and controls.
Master ITGC Frameworks - Gain a comprehensive understanding of widely recognized frameworks like COBIT and how they align IT general controls with organizational goals.
Enhance IT Governance Practices - Discover methods for safeguarding information assets, ensuring data integrity, and achieving compliance with regulatory standards.
Improve Risk Management Processes - Learn practical strategies for identifying and mitigating IT risks, and balancing controls to optimize business processes.
Navigate IT Compliance Requirements - Get equipped with actionable steps to meet compliance regulations like Sarbanes-Oxley (SOX) while managing IT operations effectively.
Course Highlights
This in-depth course is packed with insights and actionable tools for IT professionals, auditors, and managers. Key highlights include:
Foundational Concepts of ITGCs - Learn the basics of IT general controls, understanding their impact on securing systems and enabling compliance.
Effective Risk and Control Balancing - Explore the balance between managing IT-related risks and applying adequate internal controls for enhanced governance.
IT Governance Frameworks - Delve into industry standards like COBIT, ITIL, and SOX, and understand how to apply them for IT governance excellence.
Managing IT Systems and Lifecycle - Gain skills for managing system development and changes while maintaining secure and compliant IT processes.
Physical and Logical IT Security - Understand the importance of securing your IT environment, including access controls, password hygiene, and antivirus configurations.
Disaster Recovery and Business Continuity - Learn best practices for managing IT continuity plans and ensuring resilience during interruptions.
Learning Objectives
Participants will leave the course ready to implement IT general controls and governance principles effectively. By attending, you’ll learn to:
Understand Key IT Governance Standards - Analyze and apply frameworks such as COBIT and ITIL to improve organizational IT processes.
Identify IT Risks and Implement Controls - Recognize potential vulnerabilities and map controls to mitigate risks and ensure compliance.
Build Resilient IT Systems - Learn practical steps to manage system development, change controls, and technology operations securely.
Strengthen IT Compliance Efforts - Navigate SOX compliance requirements and understand auditing processes for IT systems.
Optimize IT Operations - Develop skills for securing systems, managing risks, and improving IT continuity with disaster recovery plans.
Key Agenda Topics
This streamlined and practical program provides attendees with a comprehensive learning experience through these core topics:
Morning Sessions
- Introduction to IT General Controls and Digital Governance
- Exploring Risk Management and Internal Control Frameworks (COBIT and ITIL)
- Managing IT Systems Development and Change
Afternoon Sessions
- Securing IT Environments – Physical and Logical Controls
- Overseeing IT Operations and Workflow Integrity
- Disaster Recovery and Business Continuity Plans
- Ensuring IT Compliance with SOX and Creating Audit-Ready Systems
Additional Features:
- Methods for controlling access to IT systems and managing process changes.
- Examples of risk and control balancing for practical application.
- Framework-based approaches to enhancing IT system efficiency while maintaining governance.
Event Details
- Format: Group-live, hands-on training with expert instructors.
- Schedule: Mondays, 8:45 a.m. – 4:45 p.m.
- Cost: $720 per participant.
- Custom Sessions: Tailored courses available for groups of two or more with flexible scheduling options.
Who Should Attend?
This course is essential for IT professionals, managers, and auditors focused on IT governance, digital compliance, and risk management. Ideal participants include:
- IT Managers responsible for overseeing operational risk and control mechanisms.
- Internal Auditors seeking to align audit controls with current standards.
- Compliance Professionals aiming for greater proficiency in IT compliance strategies.
- IT Professionals focused on strengthening organizational IT governance and security.
Why ITGCs are Crucial
Effective IT general controls (ITGCs) form the foundation for reliable IT systems and processes. They ensure that IT environments are secure, aligned with organizational goals, and compliant with regulatory requirements such as SOX. By attending this course, you’ll be equipped to implement robust controls while enhancing your organization's IT governance capabilities.
Register Now
Don’t miss out on this opportunity to advance your IT governance expertise and risk management skills. The Information Technology General Controls (ITGCs) – In-Person CPE Training Event offers practical knowledge, real-world applications, and networking opportunities with industry leaders.
Sign up today and take the next step towards mastering IT general controls, ensuring compliance, and contributing to your organization’s digital governance success!
Details on Event Presentation
Offered on Mondays at 8:45 a.m. to 4:45 p.m.
We can schedule private events on your timetable for two or more attendees.
NASBA Program Disclosure
Program Level of Understanding: Basic
Prerequisites: None
Advance Preparation: None
Delivery Format: On-site Training (Group-Live); Seminar (Group-Live)NASBA Field(s) of Study: Auditing, Information Technology
CPE Credits: 8, based on 50 minutes of instruction per hourCPE Event Highlights
Information Technology controls are described in two categories: IT General Controls (ITGCs) and Application Controls.
The seminar will cover IT General Controls within the information technology (IT) environment, computer operations, access to programs and data, program development and program changes. IT application controls will be discussed concerning transaction processing controls.
The COBIT Framework (Control Objectives for Information Technology) is the most widely-used IT General Control framework being used in SOX compliance efforts. This COBIT framework will be covered in detail concerning the typical ITGCs that need to be addressed. The COBIT frameword defines how to bring quality control in information technology function concerning ITGCs.
Learning Objectives
Attendees will:
-
Understand the similarities and differences between the ITIL and COBIT standards.
-
Learn the compliance requirements of the Sarbanes-Oxley Act.
-
Discuss how internal controls can manage risk and reduce fraud.
-
Identify methods for improving the effectiveness of information process to effect the profitability of businesses
-
Key Issues on the Agenda
Section 1 - Introduction and Background
-
Instructor's Perspective on IT Myths
-
What is IT Governance?
Section 2 - Internal Control Frameworks
-
What are "Internal Controls"?
-
IT Risks
-
Balancing Risks and Controls
-
Internal Control Terminology
-
IT Control "Frameworks"
Section 3 - Managing & Governing the IT Organization
-
IT Organization Risk and Control
-
IT Organization Relationships
-
CoBIT Domain: Plan & Organize
Section 4 - Managing the System Life Cycle
-
CobiT Domain: Acquire & Implement
-
Managing the Systems Life Cycle
-
System Development and Change Controls
-
Change Control Board
-
System Change and Development Controls - Risk & Control Objectives
-
System Change and Development Controls - Internal Controls
Section 5 - Securing the Physical and Logical IT Environment
-
CoBIT Domain: Deliver & Support
-
Physical Security
-
Logical Security
-
Password Security
-
Anti-Virus Configuration
-
Security - Risk & Control Objectives
-
Security - Internal Controls
Section 6 - - Managing Computer Operations
-
CoBIT Domain: Deliver & Support
-
Managing Computer Operations
-
Computer Operations - Risk & Control Objectives
-
Computer Operations - Internal Controls
Section 7 - Managing the Continuity of IT Services
-
CoBIT Domain: Deliver & Support
-
Managing the Continuity of IT Services
-
IT Disaster Recovery Plan
Section 8 - Monitoring the Effectiveness of IT
-
CoBIT Domain: Monitor and Evaluate
-
Monitoring the Effectiveness of IT
Section 9 - IT Compliance with the Sarbanes-Oxley Act
-
SOX Titles
-
Mapping to PCAOB and CoBIT
-
Systems for SOX Compliance
-
Procedures for IT SOX Compliance
-
Tests for IT SOX Compliance
Section 10 - Going Forward
-
Regulatory Environment
-
Long-Term Effects of SOX
-
Roadmap to IT Compliance
-
Dave's Lessons Learned
-
Summary of the Subject Matter
This CPE event "Information Technology General Controls (ITGCs) - In-Person" is designed to provide a comprehensive exploration of the best practices and considerations surrounding information technology general controls (ITGCs) using the COBIT Framework as criteria.
This event aims to equip professionals with the knowledge and insights necessary to ensure robust IT governance, risk management, and compliance within their organizations.
Key topics addressed in this event may include:
-
IT Governance Frameworks: In-depth discussions on established IT governance frameworks, highlighting their significance in aligning ITGC activities with organizational objectives and regulatory requirements.
-
Risk Assessment and Management: Insights into conducting effective risk assessments, identifying IT vulnerabilities, and implementing risk management strategies to safeguard critical assets and data.
-
Security Controls Implementation: Guidance on implementing and monitoring IT security controls, emphasizing the protection of sensitive information, prevention of data breaches, and adherence to privacy regulations.
-
Compliance and Audit Considerations: Best practices for ensuring compliance with industry standards and regulations, as well as strategies for preparing and responding to ITGC audits.
-
Emerging Technologies Impact: Exploration of the impact of emerging technologies on ITGCs, including considerations for cloud computing, cybersecurity advancements, and digital transformation initiatives.
By addressing these crucial aspects, the CPE event endeavors to empower professionals with the knowledge and tools necessary to navigate the evolving landscape of ITGCs, fostering a secure and resilient IT environment within their organizations. Quality control in information technology function will lead to lower costs and better results for any organization.
-
Authoritative Sources
After attending the CPE event focused on ITGC's (Information Technology General Controls), it's essential to continue expanding your knowledge with authoritative sources in this domain. Here are the relevant sources along with their web links:
- ISACA - Information Systems Audit and Control Association
- ISACA offers a wealth of resources related to information systems audit, IT governance, and control practices. Exploring their COBIT materials can provide valuable insights into audit planning, controls implementation, and reporting best practices specific to ITGCs.
- The Institute of Internal Auditors (IIA) - IT Audit and Assurance Guidance
- The IIA provides comprehensive guidance and resources for IT audit professionals, covering areas such as audit planning, risk assessment, and reporting tailored to the context of IT general controls. Engaging with their materials can further enrich your understanding of ITGC audit processes.
- COBIT - Information & Technology Governance Framework
- COBIT offers a robust framework for information and technology governance, including resources related to IT controls, audit planning, and reporting. Exploring their framework can provide a structured approach to aligning IT activities with organizational objectives, including audit planning and reporting for ITGCs.
By leveraging these authoritative sources, attendees can deepen their understanding of audit planning, implementation, and reporting specific to IT general controls, thereby enhancing their expertise in this crucial domain.
- ISACA - Information Systems Audit and Control Association