This tool provides questions to consider when assessing a company’s information technology (IT) controls.
The major focus areas include organizational structure, hardware, software, security, backup procedures, business continuity plan (BCP), application change procedures, remote access, internet, outsourcing, information processing integrity and compliance. Sample questions include: How many employees are in the IT department? How many contractors are in the IT department? If you use contractors or consultants, what do they work on? Are IT personnel assigned to specific job descriptions?