Five-day professional programmes in 14 citiesClassroom, online and in-house info@aractech.com +31 85 7444446

Course AGRC-045

Auditing IT General Controls

Almost every financial and operational process now runs on information systems. If the underlying IT environment is poorly controlled, appli... The outline covers IT General Controls and Audit Planning, Logical Access an...

  • 5 daysClassroom or online
  • 49Upcoming dates
  • 12Cities
  • €2,175Fees from

Choose your format and date

  • 5 days
  • 09:00–14:00
  • Certificate of attendance

Classroom sessions

  1. 7–11 Dec 2026

    Barcelona

    Next date
    €2,275 + VAT
    Register
  2. 14–18 Dec 2026

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  3. 21–25 Dec 2026

    London

    €2,915 + VAT
    Register
  4. 4–8 Jan 2027

    Barcelona

    €2,275 + VAT
    Register
  5. 11–15 Jan 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  6. 18–22 Jan 2027

    Munich

    €2,425 + VAT
    Register
  7. 25–29 Jan 2027

    London

    €2,915 + VAT
    Register
  8. 1–5 Feb 2027

    London

    €2,915 + VAT
    Register
  9. 8–12 Feb 2027

    Barcelona

    €2,275 + VAT
    Register
  10. 15–19 Feb 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  11. 22–26 Feb 2027

    Paris

    €2,810 + VAT
    Register
  12. 1–5 Mar 2027

    Rome

    €2,830 + VAT
    Register
  13. 8–12 Mar 2027

    London

    €2,915 + VAT
    Register
  14. 15–19 Mar 2027

    Barcelona

    €2,275 + VAT
    Register
  15. 22–26 Mar 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  16. 5–9 Apr 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  17. 12–16 Apr 2027

    Vienna

    €3,425 + VAT
    Register
  18. 19–23 Apr 2027

    London

    €2,915 + VAT
    Register
  19. 26–30 Apr 2027

    Barcelona

    €2,275 + VAT
    Register
  20. 3–7 May 2027

    Barcelona

    €2,275 + VAT
    Register
  21. 10–14 May 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  22. 17–21 May 2027

    Amsterdam

    €3,215 + VAT
    Register
  23. 24–28 May 2027

    London

    €2,915 + VAT
    Register
  24. 7–11 Jun 2027

    Barcelona

    €2,275 + VAT
    Register
  25. 14–18 Jun 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  26. 21–25 Jun 2027

    London

    €2,915 + VAT
    Register
  27. 5–9 Jul 2027

    Dubai

    €2,845 + VAT
    Register
  28. 12–16 Jul 2027

    London

    €2,915 + VAT
    Register
  29. 19–23 Jul 2027

    Barcelona

    €2,275 + VAT
    Register
  30. 26–30 Jul 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  31. 2–6 Aug 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  32. 9–13 Aug 2027

    Geneva

    €3,315 + VAT
    Register
  33. 16–20 Aug 2027

    London

    €2,915 + VAT
    Register
  34. 23–27 Aug 2027

    Barcelona

    €2,275 + VAT
    Register
  35. 6–10 Sep 2027

    Barcelona

    €2,275 + VAT
    Register
  36. 13–17 Sep 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  37. 20–24 Sep 2027

    London

    €2,915 + VAT
    Register
  38. 4–8 Oct 2027

    London

    €2,915 + VAT
    Register
  39. 11–15 Oct 2027

    Barcelona

    €2,275 + VAT
    Register
  40. 18–22 Oct 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  41. 25–29 Oct 2027

    Kuala Lumpur

    €2,425 + VAT
    Register
  42. 1–5 Nov 2027

    Madrid

    €3,400 + VAT
    Register
  43. 8–12 Nov 2027

    London

    €2,915 + VAT
    Register
  44. 15–19 Nov 2027

    Barcelona

    €2,275 + VAT
    Register
  45. 22–26 Nov 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  46. 6–10 Dec 2027

    Frankfurt

    Lowest fee
    €2,175 + VAT
    Register
  47. 13–17 Dec 2027

    Munich

    €2,425 + VAT
    Register
  48. 20–24 Dec 2027

    London

    €2,915 + VAT
    Register
  49. 27–31 Dec 2027

    Barcelona

    €2,275 + VAT
    Register

Online / Live sessions

  1. 7–11 Dec 2026

    Live virtual classroom

    Next date
    €1,625 + VAT
    Register
  2. 14–18 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  3. 21–25 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  4. 4–8 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  5. 11–15 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  6. 18–22 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  7. 25–29 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  8. 1–5 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  9. 8–12 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  10. 15–19 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  11. 22–26 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  12. 1–5 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  13. 8–12 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  14. 15–19 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  15. 22–26 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  16. 5–9 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  17. 12–16 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  18. 19–23 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  19. 26–30 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  20. 3–7 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  21. 10–14 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  22. 17–21 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  23. 24–28 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  24. 7–11 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  25. 14–18 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  26. 21–25 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  27. 5–9 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  28. 12–16 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  29. 19–23 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  30. 26–30 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  31. 2–6 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  32. 9–13 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  33. 16–20 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  34. 23–27 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  35. 6–10 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  36. 13–17 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  37. 20–24 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  38. 4–8 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  39. 11–15 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  40. 18–22 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  41. 25–29 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  42. 1–5 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  43. 8–12 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  44. 15–19 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  45. 22–26 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  46. 6–10 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  47. 13–17 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  48. 20–24 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  49. 27–31 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register

Introduction

Course overview

Almost every financial and operational process now runs on information systems. If the underlying IT environment is poorly controlled, application controls and system reports cannot be relied upon, and errors or fraud may go undetected. IT general controls therefore sit at the heart of both internal and external audit work.

This Auditing IT General Controls training course gives auditors a practical understanding of how to plan, test and report on the core IT control domains: access management, change management, IT operations and system development. Participants learn what good controls look like, how to obtain and analyse evidence, and how to evaluate deficiencies and their impact.

The course is designed for both IT and non-IT auditors, explaining technical concepts in clear language while providing the depth needed to perform credible, evidence-based audit work.

View full course outline

What you will achieve

Learning objectives

  • Explain the purpose of IT general controls and their link to financial reporting
  • Scope an IT general controls review based on risk
  • Assess the design of logical access and user management controls
  • Test change management controls for applications and infrastructure
  • Evaluate IT operations controls including backup and job scheduling
  • Review system development and acquisition controls
  • Obtain, analyse and document reliable IT audit evidence
  • Evaluate and report control deficiencies effectively

Who should attend

Target audience

  • Internal auditors and audit managers
  • IT auditors and IT risk professionals
  • External auditors involved in IT reviews
  • Information security and compliance staff
  • IT managers preparing for audits
  • Finance professionals relying on system controls

Methodology

Learning approach

  • The course is practical and evidence-focused. Participants work through sample system reports, user access listings, change tickets and backup logs, performing tests as they would in a real audit. Short technical explanations are followed by exercises, walkthrough simulations and the drafting of audit findings.

Complete course outline

Five focused days of learning and application

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Day 1

IT General Controls and Audit Planning

  1. The relationship between IT general controls and application controls
  2. IT risks to data integrity, availability and confidentiality
  3. Common control frameworks used in IT audit
  4. Coffee break
  5. Understanding the IT environment: systems, databases and infrastructure
  6. Risk-based scoping of an IT general controls review
  7. Working with IT teams and planning walkthroughs
  8. Exercise: scoping an ITGC review for a finance system

Day 2

Logical Access and User Management

  1. User provisioning, modification and removal processes
  2. Privileged and administrator access controls
  3. Password policies, authentication and single sign-on
  4. Segregation of duties in systems and how to test it
  5. Coffee break
  6. Segregation of duties in systems and how to test it (continued)
  7. Periodic user access reviews and their effectiveness
  8. Analysing user listings against HR leaver data
  9. Exercise: testing access controls with sample data

Day 3

Change Management Controls

  1. Why uncontrolled changes threaten system reliability
  2. Change request, approval, testing and implementation steps
  3. Segregation between development and production environments
  4. Emergency changes and how they should be controlled
  5. Coffee break
  6. Emergency changes and how they should be controlled (continued)
  7. Database and infrastructure change controls
  8. Selecting samples and testing change tickets
  9. Exercise: evaluating a set of change records

Day 4

IT Operations and System Development

  1. Job scheduling, monitoring and incident management
  2. Backup, restoration testing and data retention
  3. Physical and environmental controls over data centres
  4. Controls over cloud and outsourced IT services
  5. Coffee break
  6. Controls over cloud and outsourced IT services (continued)
  7. System development life cycle and project controls
  8. Data migration and go-live controls
  9. Exercise: reviewing backup and incident evidence

Day 5

Evidence, Evaluation and Reporting

  1. Sufficient and appropriate IT audit evidence
  2. Using data analytics and system reports reliably
  3. Evaluating the severity of IT control deficiencies
  4. Compensating controls and their limitations
  5. Coffee break
  6. Compensating controls and their limitations (continued)
  7. Writing clear IT audit findings for non-technical readers
  8. Agreeing remediation and follow-up with IT management
  9. Personal action plan for IT general controls auditing

Ready to book?

Auditing IT General Controls

Next session: 7 - 11 December 2026, Barcelona

Course FAQs

Questions about this course

What participants and training managers usually ask before booking Auditing IT General Controls. Can't find your answer?

WhatsApp
What does Auditing IT General Controls (AGRC-045) cover?

This course covers Auditing and Governance Risk and Compliance through a structured five-day outline focused on practical application, discussion, and implementation planning.

When is the next available session?

The next scheduled session starts on 21 - 25 December 2026. See the course schedules section for the available dates and delivery formats.

Who should attend this course?

Internal auditors and audit managers, IT auditors and IT risk professionals, External auditors involved in IT reviews

Is bilingual course delivery available?

Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.

How can I register for a session?

Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.

Is this course available online as well as classroom-based?

Check the course schedules section for currently published classroom and Online / Live sessions.

Where are classroom sessions delivered?

Current classroom venues include London, Barcelona, Frankfurt, Munich, Paris, Rome, Vienna, Amsterdam, Dubai, Geneva, Kuala lumpur, Madrid.

How long is the training programme?

The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).