Controls Design and Implementation Services

Our controls design and implementation service provides advice on the controls and security related to the development and implementation of a new computer system with particular emphasis on control over the application itself including user procedures, programmed procedures and computer controls.

The first thing to recognize about our service is that there is a tremendous variety of ways in which we can assist clients in ensuring that new systems are controlled effectively. We can apply our basic skills in application and IT controls to assist clients at any or all stages of the systems development life cycle.

An overview of the controls design and implementation process is given in the following page.

The Control Design process - An Overview

• A review at the system design stage to assist a development team to ensure that their design incorporated effective control procedures. This would involve detailed analysis of the possible paths for each transaction and recommendation of control features.
• Assistance in the design of controls throughout major projects commencing with establishment of an overall control structure and leading on to development of a set of generic controls to be applied to the application process. The generic controls would be mapped against the process to produce a control design expressed in the form of control specifications that application programmers could implement.
• We can be involved as a member of a project group conducting a package selection exercise. This includes review of the selected package and recommendation of key controls to be exercised by users at all locations within the organisation and within the IT department
• Review of systems developed in-house. The output will include flowcharts of the application and recommended control procedures to be incorporated in internal user guidance on the system.