close

What Is Truth to Power?

[+/-] A research and advisory resource...
dedicated to bridging the gaps between governance and practice, technology and business, regulation and control, risk management and real market pressures, and your own knowledge and the knowledge of your peers.
[+/-] An open forum and community...
built to create a common pool of knowledge—one big brain—that lets you work more efficiently, build technology and business practices more effectively, and endure audits more effortlessly.
[+/-] A plexus nexus...
a neutral hub through which you can reach many valuable information nodes, resource collections, and organizations that are helping people like you already, but in fractured ways.
[+/-] A rebellion...
against the idea that auditors, analysts, and consultancies can control information simply through their ability to collect and distill it. T2P's goal is to unlock the vast body of knowledge, insight, and conventional wisdom that we all have, make it freely available to you, and help you digest and interpret it—without undue cost, bias, or hype.
Top Panel
WHAT IS T2P?
Top Panel

T2P Community Research Resources

Resource Categories

IT Audit Checklists

IT Audit Checklists are a T2P members-only resource. Originally published by the IT Compliance Institute, the checklists offer practical guidance and experience-based insight to help IT, compliance, and business managers prepare for more successful and productive internal audits.

In addition to helping you understand what auditors look for and why, IT Audit Checklists support proactive operational self assessments. By measuring your internal processes against the managerial, operational, and technical control objectives in these papers, you can uncover new opportunities for system and process improvements—and address them in advance of an actual audit.

Original Guidance & Publications

Resources in this section are original, vendor-neutral guidance and insight, freely available for the benefit of the Truth to Power Research Community. In particular, check out our newest publication, written by community member Benjamin Tomhave: PCI Requirements to Action - Practical Guidance for More Efficient, Effective Compliance.