Overview

Chapter 9 "Application Systems: Risks and Controls" covers various risks to application systems like ERP systems, End User Developed (ERD) systems, web applications, and internally built systems. Your homework helps you to really try to understand the perils associated with EUD systems by asking you to think about EUD systems in the context of the application environment for an organization and think about how they might become "incomparible systems. Then, you are asked to evaluate a scenario involving a spreadsheet (which might certainly be something you run across in real life) in terms of the risks in a spreadsheet system. Your homework further asks you to think about web application risks and the risk associated with systems developed by technical people within the organization.

Chapter 10 "Change Control Management" refers to the process that ensures the effective implementation of changes in an IT environment. You will learn explicitly what is involved in the change control management process, , the different types of changes that might come about, and the role of the change control management board. Your homework focuses on parts of this process like the criteria for approving changes, and software configuration management. Then, the book talks about organizational change management with an emphasis on the interdependencies between IT change management and organizational change management. Your homework asks for you to describe those interdependencies in your own words. Finally, the change control audit is described. You must describe some of those change control audit procedures in your last homework problem.

Module Objectives

In this module, the activities, content, and assignments will guide your learning process to ensure you can:

Chapter 9

Discuss common risks associated with application systems.
Discuss common risks associated with end-user development application systems.
Discuss risks to systems exchanging business information and describe common standards for their audit assessments.
Describe Web applications, including best secure coding practices and common risks.
Explain application controls and how they are used to safeguard the input, processing, and output of information.
Discuss the IT auditor’s involvement in an examination of application systems.

Chapter 10

Describe the importance of a change control system.
Explain the change control management process.
Discuss change control management procedures.
Define configuration management, and describe sample activities conducted as part of a configuration management plan.
Describe organizational change management.
Describe the audit involvement in a change control examination.

Module To-Do List

Here's everything you need to do and remember for this module:

Read Chapter 9 (Application Systems: Risks and Controls) and Chapter 10 (Change Control Management)
Watch: Week 5 Concept Overview Videos
- Complete the Concept Overview Assignment
Apply: Complete Chapter 9 Homework
Apply: Complete Chapter 10 Homework
ASSESS: Complete the Week 5 Mastery Quiz