This document contains two sample policies that provide guidelines and procedures for understanding and following an organization’s email use process.

The two sample work programs included in this audit tool aim to identify and mitigate compliance risks, improve compliance with applicable laws and policies, and protect employees and a...

This tool contains three guidance documents that can be used by auditors to facilitate a risk assessment workshop.

In this tool, we have included three guides that outline the best-practice elements and processes related to developing and maintaining a self-assessment program.

The purpose of this policy is to establish requirements for supporting effective information system operations while minimizing service interruptions.

This sample policy outlines procedures for the disclosure, protection and transfer of a company's private data.

This sample policy establishes clear approval levels for binding commitments of a company, whether oral or in writing.

This Active Directory Audit Work Program is a comprehensive tool that includes eight samples that each address a separate area of the AD function/structure, from architecture and design...

This document provides three sample work programs focused on monitoring and auditing entity-level controls.

This document contains multiple sample policies that provide an overview of procedures organizations should perform during the IT change management process.

This guide can be used by auditors to assess and understand the four pillars of an organization’s governance framework.

Organizations can use this rebate payments policy to identify rebate payments to be made and calculate the appropriate payment value.