What is Configurable controls?
In short
Configurable controls are settings in an enterprise resource planning or other system that enforce rules automatically, such as three-way match tolerances, approval workflows and duplicate invoice checks.
Key takeaways
- Auditors test them by inspecting the settings and confirming they work as set.
- Their reliability depends on controls over who can change the settings.
- Default settings may not match the organization's policies.
Where it's tested
ISC: Information Technology General Controls (ITGCs) — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A developer at a company has standing write access to the production database. Which ITGC category does this deficiency primarily relate to, and why does it matter?