ACCT 425 - Auditing and Control Environment

Units: 3
Knowledge and skills a certified public accountant must demonstrate with respect to information technology (IT) audit, System and Organization Controls (SOC) engagements, and engagements involving testing an entity’s controls over security, confidentiality and privacy.

Prerequisites: ACCT 321 with grade C or better
Possible Instructional Methods: On-ground, or Hybrid, or Online-Asynchronous, or Online-Synchronous.
Grading: A-F grading only.
Course Typically Offered: Variable Intermittently

Student Learning Outcomes - Upon successful completion of this course students will be able to:

Document, examine, and conclude the effectiveness of the relevant automated and manual controls within the flow of an entity’s transactions for business processes.
Recall the types of threats and attacks on an entity’s information systems.
Apply current regulations and standards related to information security and privacy to assess the design and implementation of accounting information systems and controls.
Use appropriate audit procedures to test an entity’s controls over security, confidentiality and privacy to draft the engagement report.
Explain the form, content and management assertions in SOC 1, SOC 2 and SOC 3 reports.
Perform procedures to plan SOC 1 and SOC 2 engagement and draft the engagement reports.