This tool includes key performance indicators and questions an organization should use to evaluate its customer fraud process.

This tool contains two sample audit programs that provide steps organizations can take to perform a data conversion audit.

This sample policy defines guidelines and procedures organizations should follow when using telecommunications systems.

The objective of this policy is to provide a standardized approach and operating instructions for the execution of a company’s IT risk assessment.

This tool contains key performance measures an organization should consider when achieving its merger or acquisition goals.

This tool provides a systematic process and the best-practice elements for managing an organization’s budgeting function.

This tool features leading practices that can be used to evaluate and improve an organization’s IT infrastructure.

This tool outlines leading practices and questions that can be used by organizations to identify and assess the impact of currency risk.

This sample policy contains guidelines and procedures employees should follow when overseeing third-party entities.

This document includes leading practices and questions an organization should consider when developing its pricing strategies.

This document outlines risks and controls common to managing security configurations during the security and privacy management process in a risk control matrix (RCM) format.

This tool contains questions that can be used by auditors to evaluate an organization’s capital expenditures and fixed asset process.