Monitoring Internal Control Systems and IT

Monitoring Internal Control Systems and IT provides useful guidance and tools for enterprises interested in applying information technology to support and sustain the monitoring of internal control. Guidance is provided for the design and operation of monitoring activities over existing IT controls; however, customization of the provided approaches reflecting the specific circumstances of each enterprise are required.The main goal/aims of this publication are to:Complement and expand on the 2009 COSO Guidance of Monitoring of Internal ControlsEmphasize the monitoring of application and IT general controlsDiscuss the use of automation (tools) for increased efficiency and effectiveness of monitoring processesThe shift from conceptual elaboration on the concepts and applications for monitoring provides the following help for the professional and the enterprise to implement monitoring:Diverse examplesCase studiesPractical toolsThis publication will be helpful for:Executives/senior management by providing an executive overview and suggested questions to determine whether the monitoring of internal controls is adequately addressedBusiness process owners by describing how to monitor key IT application controls and how to automate monitoring processesIT professionals by supplying templates and tools that can be leveraged when developing and implementing a monitoring project