Duration
Information Technology General Controls (ITGCs)
4 days
Day 1: Access to Programs & Data
- Introduction to ITGCs
- Overview of ITGCs
- Importance of ITGCs in Information Security
- Access to Programs & Data
- Definition and Importance
- Key Principles: Confidentiality, Integrity, Availability
- Access Control Mechanisms
- User Authentication and Authorization
- Role-Based Access Control (RBAC)
- Multi-Factor Authentication (MFA)
- Best Practices for Access Control
- Monitoring and Auditing Access
- Logging and Monitoring User Activity
- Regular Access Reviews
- Tools for Monitoring and Auditing
Day 2: Program Changes
- Overview of Program Changes
- Definition and Importance
- Risks Associated with Program Changes
- Change Management Process
- Request for Change (RFC)
- Change Evaluation and Approval
- Change Implementation and Documentation
- Version Control Systems
- Importance of Version Control
- Tools and Techniques (e.g., Git, SVN)
- Change Monitoring and Auditing
- Tracking Changes
- Tools for Monitoring Changes (e.g., CI/CD tools)
Day 3: Computer Operations
- Introduction to Computer Operations
- Key Activities and Responsibilities
- Importance of Computer Operations
- Operational Procedures
- Standard Operating Procedures (SOPs)
- Incident Management
- Backup and Recovery Procedures
- Incident Response and Recovery
- Incident Response Plan
- Disaster Recovery Plan
Day 4: Program Development
- Overview of Program Development
- Software Development Life Cycle (SDLC)
- Importance of Program Development Controls
- Development Methodologies
- Agile, Waterfall, DevOps
- Choosing the Right Methodology
- Secure Development Practices
- Secure Coding Standards
- Code Reviews and Testing
- Automated Testing and CI/CD
- Setting Up Automated Testing
- Integrating Testing into CI/CD Pipelines
Programme scope, delivery arrangements and suitability are confirmed during enquiry.