The following 70 items are listed by Content Data.
Policies & Procedures
Software Acquisition, Implementation and Maintenance: Application Development and Implementation Policy
The purpose of this sample policy is to control application development and to ensure that application development is ef...
Subscriber Content
Checklists & Questionnaires
IT Due Diligence Questionnaire
This sample questionnaire evaluates IT management, personnel, contractors, networks, operating systems, applications, ch...
Subscriber Content
Risk & Control Matrices - RCMs
Manage Systems Development Lifecycle (SDLC) RCM
Use this risk control matrix to strengthen your organization’s SDLC controls for effective risk management.
Subscriber Content
Audit Programs
Virtual Private Network (VPN) Administration Audit Work Program
This audit work program includes test steps in the areas of documentation, logging, monitoring and user pool for VPN adm...
Subscriber Content
Risk & Control Matrices - RCMs
Manage IT Assets RCM
This document outlines risks and controls common to the "manage IT assets" process in an RCM format.
Subscriber Content
Risk & Control Matrices - RCMs
Manage Service RCM
This document outlines risks and controls common to the "manage service" process in a risk and control matrix (RCM) form...
Subscriber Content
Risk & Control Matrices - RCMs
Define IT Strategy and Organization RCM
This document outlines risks and controls common to the “define IT strategy and organization” process in a risk control ...
Subscriber Content
Process Flows
Data Conversion Process Flow
Data conversion is the conversion of computer data from one format to another. This process flow details the steps invol...
Subscriber Content
Audit Programs
IT Help Desk Audit Work Program
This document outlines steps to audit an organization’s IT help desk process.
Subscriber Content
Audit Programs
IT Strategy Management Audit Work Program
This document outlines steps to audit an organization’s IT infrastructure management strategy process.
Subscriber Content
Newsletters
Oversight of IT Risk Management
In this issue of Board Perspectives: Risk Oversight, we make suggestions for boards to consider as they enhance their ri...
Subscriber Content
Newsletters
Setting the 2011 Audit Committee Agenda
This issue of The Bulletin provides observations for consideration by boards of directors and their audit committees as ...
Subscriber Content