Todays Keys What are IT Controls Basic IT Controls Where to Find - - PowerPoint PPT Presentation

Today’s Keys What are IT Controls Basic IT Controls Where to Find Resources

What are IT Controls

Objectives of IT Controls are Interrelated

Ensure integrity & reliability of data Prevent accidental loss Prevent & Detect Fraud

Automate controls

Control Environment

• Overall awareness & importance
• Management & Board set tone
• Disciplined structure = consistency
• Maintains ethical commitment

Basic IT Controls

Change Management

• Changes are authorized &

meet business requirements

• Provide training
• Have a backup plan for

glitches

Change Management

• Home Grown Systems
• document modifications
• Off the shelf applications
• software licensing documented
• upgrades documented
• ensure patches up-to-date
• Outsourced “Cloud” Software
• Security: SSAE 16 Report
• Hosting: Redundant data centers

Access

• Document business applications
• Limitations based on positions
• limit by user
• limit per application
• limit within applications

Access

• Checklist for new employees
• use when terminating
• Unique passwords
• Prohibit sharing user IDs/passwords

Disaster Recovery/Backup

• Measures to prevent a disaster
• Email protection
• Antivirus Software
• Firewall
• Surge Protection
• Server Elevated
• No sprinklers
• Backup Tape Rotation

Mission Continuity

• Contacts/call lists
• Critical Processes Assigned
• Building/Facility Information
• Key Technology & Applications
• Vital Documents
• TEST the Plan!

Physical Security

• House server in secured location
• Server secured with password

IT Staff

• In House
• Outside Consultant

Monitoring is KEY set a schedule

Resources

• Today’s Slides
• Community Foundation IT

Control Charts

• Community Foundation

Disaster Recovery Plan

• Resource Listing

The only constant in the IT space is that it changes constantly!

Questions & Answers