In this live event, Jeff will help auditors better understand how to evaluate the RACM (Risk and Control Matrix) to identify IT Dependent Controls and to evaluate whether the RACM is complete. We use real data from client’s RACMs to understand how to evaluate whether the RACM is complete and how to identify if there is a dependency on a report, configuration, or access control.

Course Agenda:

• ERP Systems Overview and Background
• Background – ISACA and IIA
• Identifying IT Dependent Controls in the RACM / Case Studies
• Looking for Risks Beyond the RACM
• Decision Matrix for Identifying IT Dependent Controls

Learning Objectives

• Help auditors better understand how to identify IT Dependent Controls.
• Learn to evaluate whether the RACM is complete using real data from a client’s RACM.
• Identify if there is a dependency on a report, configuration, or access control.