The IT Audit Checklist for IT Governance and Strategy includes:

• More than 120 specific checklist items to help you assess internal audit readiness
• Controls derived from prominent standards/frameworks including ITIL, CobiT, and NIST
• Pointers on audit planning, preparation, testing, and reporting
• Clarification on what auditors want (and don't want) to see

What Is This Paper About?

This paper, "IT Audit Checklist: IT Governance and Strategy," supports an internal audit of the organization’s IT leadership and high-level planning resources, systems, and processes. The paper includes guidance on assessing the completeness, effectiveness, and sustainability of existing IT governance and strategy; guidance on supporting effective IT leadership; and information on ensuring continual improvement of governance efforts.

Authors

Dan Swanson, CMA, CIA, CISA, CISSP, CAP, is a 26-year internal audit veteran and former director of professional practices at the Institute of Internal Auditors. Swanson has completed internal audit projects for more than 30 different organizations, spending almost 10 years in government auditing, at the federal, provincial, and municipal levels, and the rest in the private sector, mainly in the financial services, transportation, and health sectors.

He has completed more than 50 IT conversion audits and a dozen comprehensive audits of the information technology function. The author of more than 150 articles on internal auditing and other management practices, Swanson is currently a freelance writer and health information security officer during the day. He can be reached via email at This e-mail address is being protected from spambots. You need JavaScript enabled to view it .

Cass Brewer is the founder of Truth to Power and was the editorial and research director for the IT Compliance Institute (ITCi, www.itcinstitute.com) from 2004-2008. Before ITCi ceased operations in early 2008, it was an independent research and media firm committed to advancing IT’s leadership role in corporate compliance,
risk management, and governance. At its peak, it had more than 15,000 members from around the globe. T2P carries on many of ITCi's principles, expands on its community focus, and republishes some of its research.

Series Editor: Cass Brewer