Internal controls

Internal controls

1. Control Objectives

   • Change management processes
   • Appropriate backup procedures
   • physical security controls
   • Adequate environmental controls

2. Safeguarding of assets

   • The objective is to guard against loss of assets because of theft, accidental destruction, and errors
   • Transactions related to assets have been properly processed and that appropriate physical handling and control over assets exist

3. Integrity of Operating System Environment

   • The system can enable files cryptographic hashes generation and verification

4. Integrity of sensitive and critical application system

   • Authorization of the input
   • Accuracy and completeness of processing of transactions
   • Reliability of overall information processing activities
   • Accuracy, completeness and security of the output
   • Database integrity

5. Authorization of the input

   • The data has been properly authorized to be input into the application system.
   • This internal control provides reasonable assurance that transactions are properly authorized before processed

6. Accuracy and completeness of processing of transactions

   • Verifying transaction details are accurate and that all transactions are properly recorded
   • Doing comparisons between similar records maintained by different people

7. Reliability of overall information processing activities

   • A set of methods, techniques and tools to determine in which a device, product or system will work in optimal conditions

8. Accuracy, completeness and security of the output

   • The accuracy and consistency of the data stored, evidenced by the absence of altered data between two updates of the same data record

9. Database integrity

   • “Data integrity” refers to the accuracy and consistency of data stored in a database, data warehouse, data mart or other construct.