QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Running Northgate Technologies' first-year SOX ITGC program: forty applications listed in scope with no trace are narrowed through the ITGC funnel — financial scoping, system inventory, control design, access, change, operations, testing and audit coordination — catching an untracked revenue-recognition spreadsheet on the way; evidence that a leaver's access now goes on termination day, emergency changes are evidenced and backups are proven by test restores; and testing where three of twenty-five samples failed, the severity was evaluated in writing, fixes were retested, every PBC item was owned and the audit committee had no surprises.
CY-SENIOR-074Senior Level · SOX ITGC Program

SOX IT General Controls Program — The ITGC Funnel

A strategic senior-level course that runs the company-side SOX IT general controls program end to end. Work the ITGC funnel - eight stages: Financial Scoping, System Inventory, Control Design, Access Controls, Change Management, Operations Controls, Testing & Deficiencies, and Audit Coordination - scoping the financial footprint down to in-scope systems, inventorying them with owners, designing a risk-control matrix, evidencing access, change, and operations controls, testing defensibly, classifying deficiencies, and coordinating transparently with the external and internal auditors. Four hands-on activities in every lesson, built from real program artifacts, not shell commands.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Trace financial-statement materiality through significant accounts and business processes to the applications and infrastructure that must be in ITGC scope.
  • Build and maintain a current system inventory - applications, infrastructure, SaaS with SOC 1 reports, and end-user computing - with a named control owner for every system.
  • Design a risk-control matrix that ties control objectives to specific risks, classifies key versus non-key controls, and documents to an auditable standard.
  • Evidence access, change, and operations controls that survive audit scrutiny, classify deficiencies correctly, and coordinate transparently with auditors.

Price:৳10,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.