Course Description

sAccess controls are widely tested by auditors during their audit. However, they are not tested consistently and often not tied to all risks. In this Learning class, Jeff Hare, CPA CISA CIA will provide the background you need to understand why and when access controls need to be tested for all in scope systems. This course may challenge some sacred cows for you. Please come with an open mind and willingness to learn.

Agenda:

• IT Dependent Controls that Depend on a Configuration
• Recapping the Two Reasons Access Controls Must Be Tested for All In-Scope Systems
• IT Dependent Controls: Sensitive Access Risks that Allow for the Bypassing of Controls
• Consideration of Role Change Management Process
• Consideration of Patch Change Management Process
• Recap: What will you do with this information?
• The Case for Access Control Software and ERP Armor
• Contact us / Questions