This section of Protiviti's "Guide to the Sarbanes-Oxley Act: Managing Application Risks and Controls – Frequently Asked Questions" addresses common questions about testing application controls. Topics covered include: How are IT controls tested? Who should test automated controls? And, how are application controls tested?