This Application Controls Audit Work Program was designed to help organizations ensure that information systems are secure and data is accurate and reliable.

We have included two samples in this document: Sample 1 covers a variety of application and document types, including Microsoft Office documents, SQL or other in-house developed applications and out-of-the-box applications. Sample 2 considers various application controls necessary to support the business, focusing primarily on access and change controls.