This document outlines steps to audit an organization’s IT infrastructure management strategy process.

This document outlines risks and controls common to the "manage security and privacy" process in a risk control matrix (...

In this issue of Board Perspectives: Risk Oversight, we outline three contexts for conducting IT briefings with the boar...

In this issue of The Bulletin, we share 10 lessons learned from COSO 2013 successful implementations from a variety of s...

This document outlines steps to audit the process used to deploy software to desktop computers.

This issue of Board Perspectives: Risk Oversight articulates why it’s important to focus on protecting an organization’s...

This sample IT application management audit work program is designed around key risk indicators of potential problems.

The purpose of this work program is to provide the general steps used for an inventory audit of a distribution center fo...

The purpose of this work program is to provide the general steps used to perform an audit of purchasing, A/P, travel and...

The purpose of this work program is to provide the general steps used to review the system implementation process.

To regulate information technology (IT) changes from beginning to end, it’s important to have an IT change management pr...

In this booklet, we share accounts from some of the world’s leading organizations’ internal audit executives that show t...