Find Resources & Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

You must be logged in to join this group.

Application Controls

Collaborate, contribute, consume and create knowledge around Application Controls. Click “Join Now” to become a full contributing member of this topic.

You must be a member of ISACA to join this group. Join now!

 
This Topic Has:
191 Members
0 Online
2858 Visits

 Recent Discussions

Mobile Application Controls. Posted by Richard Fowler.
Governance model for application controls. Posted by Diego Pulido.
How difficult is it to understand and test application c... Posted by Richard Fowler.

Community Leader

Richard Fowler

Richard Fowler

Title: Senior Audit Specialist

Points: 30

Tariq Mahmood

Tariq Mahmood

Title: Lead IT Auditor

Points: 168


 
NEW! Participate in Discussions Via Email. 

You can now respond to discussions by simply replying to the email alert. Just enable this feature in discussions on this topic. Learn more

Discussions: 9 total

Must be a Topic member to contribute
View All »
Richard Fowler | Yesterday | 1 comments
Diego Pulido | 54 days ago | 3 comments
Richard Fowler | 125 days ago | 1 comments
Richard Fowler | 257 days ago | 0 comments
Richard Fowler | 312 days ago | 7 comments
Vikrant031 | 335 days ago | 1 comments

Documents & Publications: 6 total

Must be a Topic member to contribute
A very good overview published in ISACA's Journal back in 2002, and still relevent today.
Posted by Richard Fowler 217 days ago
Books
Implement a systematic approach to security in mobile application development with help from this practical guide that also features case studies, code examples and best practices.
Posted by ISACA 351 days ago
The IIA has a series of documents called Global Technology Audit Guides ("GTAG"). Although ISACA and the IIA are related organizations, some documents are still for members only. I hope I can still share this overview, however.
Posted by Richard Fowler 476 days ago
Downloads
Posted by ISACA 730 days ago
Downloads
Posted by ISACA 730 days ago

Events & Online Learning: 0 total

No Results Found

Journal Articles: 9 total

Volume 5, 2011
by Emanuele Palmas, CISA
Implementing in-house ITGC/ITAC is a great opportunity for auditors to improve their knowledge of the company, and for the company, it is a chance to build IT governance that strengthens corporate governance.
Volume 2, 2011
by Loic Jegousse, CISA, CISM, CGEIT, CRISC
The proposed approach in this article will assist in reducing reliance on IT automated controls (ITAC) when it makes business sense to do so.
Volume 6, 2009
by Joseph Natovich, Ph.D., CPA
Volume 4, 2004
by Sanjiv Kumar Agarwala, CISA, CISSP
Volume 6, 2002
by Erik Guldentops, CISA, and Steven De Haes

Wikis: 2 total

Blog Posts: 4 total

Must be a Topic member to view blog posts
On the AS/400 (System i) it is possible to audit for default passwords using the ANZDFTPWD command. A default password is defined as a password which is the same as the user profile. The command behaves slightly differently depending on the value of the s...
Posted By : Ian Cooke | 0 comments
Before we get into auditing Oracle privileges a reminder of a few definitions might be helpful. A user privilege is the right to run a particular type of SQL statement, or the right to access an object belonging to another user, run a PL/SQL package, and...
Posted By : Ian Cooke | 1 comments
On March 1st,  I was invited to speak at the CampIT conference on Enterprise Risk/Security Management at Rosemont Convention Center. Before me there were two speakers. The first presenter spent an hour presenting the story from the trenches of technolog...
Posted By : Umesh391 | 0 comments
14 Dec 2010
As your Application Controls Group Moderator, I wanted to take some time and start a blog.  Not that I have anything stellar to pass along, at least not today, but the tool is here so I thought I'd do something with it. And I have.  But just so you know,...
Posted By : Richard Fowler | 0 comments