This sample compliance work program can be modified for scope considerations that will depend on the extent of the softw...

This document outlines risks and controls common to the "deploy and maintain solutions" process in a risk control matrix...

This document outlines steps to audit an organization’s data management process and includes a self-assessment questionn...

This document outlines steps to audit an organization’s IT help desk process.

This document outlines steps to audit an organization’s IT infrastructure management strategy process.

This document outlines risks and controls common to the "manage security and privacy" process in a risk control matrix (...

In this issue of Board Perspectives: Risk Oversight, we outline three contexts for conducting IT briefings with the boar...

In this issue of The Bulletin, we share 10 lessons learned from COSO 2013 successful implementations from a variety of s...

This document outlines steps to audit the process used to deploy software to desktop computers.

This issue of Board Perspectives: Risk Oversight articulates why it’s important to focus on protecting an organization’s...

To regulate information technology (IT) changes from beginning to end, it’s important to have an IT change management pr...

In this booklet, we share accounts from some of the world’s leading organizations’ internal audit executives that show t...