Application Controls
Defining Application Controls
Objectives of Application Controls
Application Controls vs. General Controls
Types of Application Controls
Preventive, Detective, and Corrective Controls
Benefits of Relying on Application Controls
Risk Assessment
Risk Assessment Approach
Example of Application Control Risk Assessment
Scoping of Application Controls
Business Process Method
Application Review Approach
Planning
Testing Application Controls
Flowchart-Documentation
Process Narrative-Documentation
Risk and Control Matrix
Sources

Testing Application Controls

Are application controls working?
Substantive testing
Information technology general controls review
Ways to test:
Inspection of system configurations
Inspection or re-performance of reconciliations with supporting details
Re-Performance of the control activity using system data
Inspection of user access listings
Re-Performance of the control activity in a test environment