IT General Controls

Case Requirements
1. For each ITGC area, identify the control issues and classify them as strengths or weaknesses, using Exhibit 3 to document your work. Exhibit 3 will be part of the audit
team’s work papers.
2. Assess the overall risk of the organization’s ITGCs, taking into consideration the five separate risk assessments that you just made (task #2 above), and their relative importance to internal controls over FFC’s financial reporting.
3. Prepare a report that documents and appropriately supports your overall IT risk assessment (task #3), using the guidance Sophie provided in Exhibit 4. You must include a statement explicitly stating your overall risk assessment in the report’s concluding section and attach your completed ITGCs matrix.