New AIS & Control Frameworks

Framework

A structure or set of principles used to make judgments, like a grading rubric, temple recommend questions, etc.

COBIT

A framework for managing enterprise IT infrastructure

COSO Internal Control Framework

A framework that is the authority on internal controls

CERAMIC

The five elements of COSO. In order, they are Control Environment, Risk Assessment, Control Activities, Information and Communication (abt controls), and Monitoring Activities

SOC Reports

Reports done on an organization by a single auditor that are then shared with every company that might be doing business with that particular organization (these reports are non-public)

Cost-benefit Analysis of Control Activities

Every control activity has a time-based or monetary cost; are they worth implementing?A

Application Controls

Protection of company transaction and general data. These are worthless without the General Controls to provide a first line of defense.

General Controls (ITGCs)

Technology protection: management of backups, access, and tech incidents and changes.