This issue of Board Perspectives: Risk Oversight provides a context for understanding the most critical uncertainties co...

The purpose of this sample policy is to control application development and to ensure that application development is ef...

This sample establishes policies and procedures for business continuity process ownership.

This sample policy outlines procedures to identify a company’s most critical business processes and support functions an...

The purpose of this risk management questionnaire is to help boards and management think about how they can develop a de...

Use this risk control matrix to strengthen your organization’s SDLC controls for effective risk management.

This memo focuses on IT SOX readiness procedures for an application, testing change management, computer operations and ...

This memo outlines minimum IT controls around user access, change control, backup, privacy, licenses and document retent...

This internal audit engagement memo informs an auditee of an upcoming audit and includes the objectives of the audit, pr...

This memo documents a company’s approach to administering and supervising internal audit work completed by department pe...

This audit work program focuses on computer operations and IT job scheduling. Audit objectives and test steps help deter...

This issue of Board Perspectives: Risk Oversight discusses current challenges and effective practices in the board’s ove...