Operating System Control and Audit Tests
If operating system integrity is compromised, controls within individual accounting applications that impact financial reporting may also be compromised. For this reason, the design and assessment of operating system security controls are SOX compliance issues. This section presents s variety of control techniques for preserving operating system integrity and describes the associated tests that auditors may conduct. The following areas are examined: access privileges, password control, virus control, and audit trail control.