This document contains two sample policies that provide guidelines and procedures for understanding and following an organization’s email use process.

The two sample work programs included in this audit tool aim to identify and mitigate compliance risks, improve compliance with applicable laws and policies, and protect employees and a...

The purpose of this policy is to establish requirements for supporting effective information system operations while minimizing service interruptions.

This guide can be used during the planning phase of implementing ERM across an organization. It supports a phased implementation approach and details tasks, deliverables and a project t...

In this tool, we have included three guides that outline the best-practice elements and processes related to developing and maintaining a self-assessment program.

This sample policy establishes clear approval levels for binding commitments of a company, whether oral or in writing.

This Active Directory Audit Work Program is a comprehensive tool that includes eight samples that each address a separate area of the AD function/structure, from architecture and design...

This sample policy outlines procedures for the disclosure, protection and transfer of a company's private data.

This document provides three sample work programs focused on monitoring and auditing entity-level controls.

This guide can be used by auditors to assess and understand the four pillars of an organization’s governance framework.

This document contains multiple sample policies that provide an overview of procedures organizations should perform during the IT change management process.

The following sample outlines a set of policies and procedures for ensuring that accounting for deferring and amortizing the costs of promotional materials is in compliance with managem...