The verification of IT general controls as part of a SOX audit follows a
A) Top-down procedure
B) Bottom-up procedure
C) Either of the above, depending upon the organization
D) Both the above, to ensure comprehensive coverage

Question

Quizplus · Accepted Answer

The verification of IT general controls as part of a SOX audit follows a top-down procedure which starts with an assessment of entity-level IT controls and then moves on to application-level controls. This approach ensures that the most critical areas are tested first and that testing is focused on the areas of greatest risk to the financial statements.

The Verification of IT General Controls as Part of a SOX