110 | Policing Information Technology

In this episode, we have Cat and Andy talk about Information Technology General Controls. They emphasize the importance of setting up and implementing proper restrictions for protection, both for the company and yours. They also discuss tips on how to better engage internal auditors in the system but making sure that they’re not taking over the whole thing.

Listen in now and learn more about this very interesting topic that Cat and Andy have for you today!

Quotes:

"You Then Need To Take A Lot Of Marching Orders And Take Very Clear Direction From Whoever The Internal Controls Person Is, Who's Working On It Because They Are  Really Should Be Directing On The Level Of Information That Needs To Be Done.”

“It's Only When You Can Identify The Who, That You Can Start To Identify Where The Access Gaps Are.”

Show Notes:

(00:00) Podcast Intro

(00:27) About Information Technology General Controls

(01:52) Restricting Access For Protection

(06:11) Different Branches Of Controls

(10:09) The Difference On The Rules Between A Regulated And A Non-regulated Company

(12:24) What The It Consultants Should Do In Order To Help Make This Data Retrieval Easy

(17:59) How To Better Engage Internal Auditors In Your System And Not Let Them Take Over The Whole Thing

(23:14) Laying Out The Rules Of Engagement

(25:17) Identifying The Areas That Are Risky

(27:09) The Relevance And Importance Of Adequate Understanding Of Internal Controls  

(29:25) Andy’s New Book The Consultant’s Code Has Recently Made It To #1 As The 

International Bestselling Book On Amazon

(30:33) Check Out The Consultant’s Code Book At https://theconsultantscode.com