IT Organization Audit Work Program

This sample audit work program outlines steps to perform an IT organization audit.

Risk indicators include: missing organization chart, implying organizational confusion over roles and responsibilities; few or poorly documented job descriptions; gaps in coverage with roles and responsibilities unmet by individuals; “pockets” of IT emerging in user organizations, signaling dissatisfaction with the formal IT organization; redundant roles, which could result in poorly coordinated work; and lack of leadership, evidenced by high turnover of CIOs.