What is the purpose of 2-140?
This worksheet is to help auditors with the following:
Identifying and assessing the adequacy of resources responsible for IT applications and related IT infrastructure
For IT Applications Identified, evaluating their susceptibility to risks arising from IT
For IT Applications with identified risks arising from IT, evaluating the sufficiency of General IT Controls to mitigate those risks
How to use 2-140?
The 2-140 worksheet provides a detailed summary for all of the specified IT applications in the key business processes.