Auditing and Governance Risk and Compliance

IT General Controls Audit

IT general controls underpin the reliability of financial and operational systems. This course covers ITGC domains, including access management, change management, IT operations and system development, audit planning, testing techniques, evaluating deficiencies and reporting.

5 days Classroom or live online English

Smart Horizon Certified - Global Leadership Consultants

Take the course details with you.

Download the full standard outline: why attend, methodology, objectives, audience, competencies, the daily outline and current plans.

Download course PDF

Why attend

From knowledge to real-world impact.

Weak IT controls can undermine financial reporting and business processes. This course gives auditors practical skills to assess ITGCs.

Workplace challenges

Professional Problems This Course Is Designed to Solve

The programme explores practical approaches to the following challenges. Results depend on how the learning is applied in your organisation.

Difficulty translating subject knowledge into practical workplace decisions.
Inconsistent approaches to the activities covered in the course outline.
Lack of a structured plan for applying and reviewing new skills.

Course methodology

How you will learn.

The course uses control walkthroughs, testing exercises, case studies and audit report writing.

Course objectives

What you'll take away.

By the end of this course, participants will be able to:

Explain the role of IT general controls
Plan ITGC audits based on risk
Test logical access controls
Test change management and IT operations controls
Evaluate deficiencies and their impact
Report ITGC findings effectively

Target audience

Who should attend.

This course is suitable for:

Internal and external auditors
IT auditors
Compliance professionals
IT managers
Risk professionals

Target competencies

Capabilities you will build.

Participants will develop competencies in:

ITGC frameworks
Access control testing
Change management testing
IT operations review
Deficiency evaluation
Audit reporting

Course outline

Your learning journey.

A focused, practical outline with time to explore, apply and reflect.

Day 1ITGC Fundamentals

09:00–09:54IT controls and financial reporting
09:54–10:48ITGC domains
10:48–11:00Frameworks
11:00–11:30Coffee break
11:30–12:12Frameworks (continued)
12:12–13:06Scoping
13:06–14:00Exercise: System scoping

Day 2Access Management

09:00–09:54User provisioning
09:54–10:48Privileged access
10:48–11:00Access reviews
11:00–11:30Coffee break
11:30–12:12Access reviews (continued)
12:12–13:06Segregation of duties
13:06–14:00Lab: Access testing

Day 3Change and Development

09:00–09:54Change management controls
09:54–10:48Emergency changes
10:48–11:00System development
11:00–11:30Coffee break
11:30–12:12System development (continued)
12:12–13:06Testing approaches
13:06–14:00Lab: Change testing

Day 4IT Operations

09:00–09:54Backups and recovery
09:54–10:48Job scheduling
10:48–11:00Incident management
11:00–11:30Coffee break
11:30–12:12Incident management (continued)
12:12–13:06Cloud and outsourced services
13:06–14:00Case study: ITGC failures

Day 5Evaluation and Reporting

09:00–09:54Deficiency evaluation
09:54–10:48Compensating controls
10:48–11:00Reporting
11:00–11:30Coffee break
11:30–12:12Reporting (continued)
12:12–13:06Remediation follow-up
13:06–14:00Capstone: ITGC audit report

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Dates & venues

Find a session that works for you.

Confirmed dates accept registration requests. Tentative dates are enquiry only.

Good to know

A few things to know.

How is the course delivered?

Our classroom programmes combine facilitated discussion, case studies, exercises and reflection. The precise format will be confirmed before enrolment.

Can you deliver this programme for our team?

Yes, you can enquire about a tailored programme. Share your goals, group size and preferred dates with our learning team.

Will I receive a certificate?

Participants who complete the programme receive a Smart Horizon certificate of attendance. Smart Horizon programmes are not externally accredited and do not award a professional qualification, licence or designation. Where a course title or outline refers to a professional certification (for example, AACE International's Certified Cost Professional), the programme supports learning and preparation only; the credential itself is awarded solely by the relevant professional body under its own application and examination requirements.

What should I confirm before booking travel?

Please confirm the session, exact venue, accessibility arrangements, fees and any visa requirements with the team before arranging travel. Tentative dates are not confirmed sessions.

Keep exploring

Your next horizon awaits.

All courses

The full course agenda and dates are available above. Use the session links in Dates & venues to choose a session. Registration and quotation forms require JavaScript; you can also contact our learning team directly.