This document outlines risks and controls common to the employee leave component of the “manage and administer benefits” process in a risk control matrix (RCM) format.

This sample IT risk assessment audit report presents findings from an entity-level risk analysis review.

This sample policy is helpful as a referral guide for all of the personnel that play a part in the employee selection process.

This sample audit report outlines an event-based timeline, a proposed interim delivery team structure, and roles and costs associated with an internal audit leadership transition.

This sample internal audit report to the audit committee chairman focuses on an audit plan for establishing an organization’s internal infrastructure.

This sample questionnaire evaluates IT management, personnel, contractors, networks, operating systems, applications, change management, data, disaster recovery, operations, third-party...

This document outlines risks and controls common to the employee bonus component of the payroll and benefits process in a risk control matrix (RCM) format.

The Process Classification Scheme (PCS) is a framework used by Protiviti that can be utilized to organize information about a company according to relevant business and/or industry proc...

This document outlines risks and controls common to the elder care component of the “manage and administer benefits” process in a risk control matrix (RCM) format.

This tool outlines the business risks associated with inappropriate access to systems, data or information and suggests best practices to counter these risks.

This sample policy explains the procedures for coordinating the proper registration and maintenance of vendor information in a company’s vendor database.

This document outlines risks and controls common to the “manage service contracts” process in a risk control matrix (RCM) format.