Use the real-world techniques and receive usable templates in this guide to manage and execute your IT compliance initiative.

Common IT deficiencies include: formalized/documented policies and procedures are lacking, controls over changes to systems and data are lacking, the user access management/administration process is ineffective, programmer access to production is nonexistent, segregation of duties within the application is lacking, security/access to databases and subsystems is nonexistent, controls over spreadsheets are ineffective, and “evidentiary” failures occur. Additionally, management should consider a broader business risk focus to identify significant issues in a timely manner.