Home 
Library
Library
| IT Audit Checklists |
|
IT Audit Checklists are a T2P members-only resource. Originally published by the IT Compliance Institute, the checklists offer practical guidance and experience-based insight to help IT, compliance, and business managers prepare for more successful and productive internal audits. In addition to helping you understand what auditors look for and why, IT Audit Checklists support proactive operational self assessments. By measuring your internal processes against the managerial, operational, and technical control objectives in these papers, you can uncover new opportunities for system and process improvements—and address them in advance of an actual audit. 
IT Audit Checklist: IT Governance and Strategy
Guidance on assessing the completeness, effectiveness, and sustainability of existing IT governance and high-level strategy. Includes more than 120 specific checklist items.
 |   | 
IT Audit Checklist: Risk Management
Advice on the necessary preparation, planning, and communication strategies involved in a sucessful risk-management audit. Includes 80 specific checklist items.
| |
IT Audit Checklist: Information Security
Supports an internal audit of the organization's information security program with guidance on improving information security programs and processes. Includes 228 specific checklist items.
IT Audit Checklist: Privacy and Data Protection
Supports an internal audit of the organization's regulatory, legal, contractual, and business requirements for maintaining the confidentiality and integrity of sensitive information related to itself, employees, customers, business partners, and other entities.. Includes 270 specific checklist items.
| |
IT Audit Checklist: Change Management
Supports an internal audit of the organization's change management policies in order to verify compliance and look for opportunities to improve efficiency, effectiveness, and economy. Includes 187 specific checklist items.
| | If you like the IT Audit Checklists, you might also like:
PCI: Requirements to Action
|
RSS
Process Capability
As a Six Sigma Blackbelt, I can see that a check list based approach to the Audit Process could improve its quality and consistence by following the first two stages of a Six Sigma Process: Define and Measure.
Still, there does not seem to be described any Analytical measures of the test effectiveness of these lists for me to consider when evaluating the worth of a testing approach in furtherance of good Audit Process improvement or quality improvement approaches to client processes to be measured.
Is it possible to attest to any of the false positive or false negative experiences of Auditors while using such defined tests lists? (A strange question I know, but useful for the adopting of Quality Audit Process Testing Procedures.)
Still, there does not seem to be described any Analytical measures of the test effectiveness of these lists for me to consider when evaluating the worth of a testing approach in furtherance of good Audit Process improvement or quality improvement approaches to client processes to be measured.
Is it possible to attest to any of the false positive or false negative experiences of Auditors while using such defined tests lists? (A strange question I know, but useful for the adopting of Quality Audit Process Testing Procedures.)
