Level - Intermediate; 2 Day Course; 16 Hours CPE  

Assessing Controls in Information Systems (ACIS) is a two-day training session designed to provide an in-depth review of established guidelines for evaluating the effectiveness of controls employed in federal, state and local government information systems. With all government systems having some level of sensitivity, more emphasis is now being placed on developing and implementing adequate general and business process application controls in information systems. General controls are the policies and procedures that apply to all or a large segment of an entity's information systems and are applied at the entity-wide, system, and business process application levels. Business process application level controls are those controls over the completeness, accuracy, validity, confidentiality, and availability of transactions and data during application processing. As a result of the increased emphasis in this area, a totally different approach is necessary in assessing the controls in these computerized information systems. Using pertinent information from GAO's Federal Information System Controls Audit Manual (FISCAM), selected National Institute of Standards and Technology (NIST) Special Publications and other relevant published guidance, the training material is structured using a check-list approach to address the four major course objectives outlined below. All of the topics presented are designed to give the auditor and audit management a thorough understanding of the challenges facing agencies in integrating and assessing computer security in federal, state and local government information systems.

More

Request More Info