Auditing ITGCs and Application Controls

Course 4 of 9 in our IT Auditing Learning Path! Auditing ITGCs and Application Controls is an intermediate-level course designed for auditors, accountants, and compliance professionals who want to strengthen their IT audit skills. You’ll gain a practical understanding of how ITGCs form the backbone of secure systems and how application controls safeguard data integrity within business processes.

Through case studies, walkthroughs, and guided audit examples, you’ll see how these two layers of control interact, where common red flags appear, and how to adapt audit procedures when deficiencies are found. The course also explores ERP and cloud-based SaaS environments, giving you tools to address today’s most common IT audit scenarios.

By the end, you’ll be equipped to perform effective, well-documented audits that provide assurance over both IT infrastructure and application-level processes.

This course covers topics that align with concepts addressed in Domain 4 of the Certified Information Systems Auditor (CISA®) exam framework. It is not affiliated with, endorsed by, or sponsored by ISACA®, nor does it guarantee exam preparation or certification outcomes.