Identity and Access Management

This tool contains two sample policies that define the security standards that must be applied regarding personnel.

Use these audit work program samples to assess the effectiveness of risk management processes and the risk levels relate...

This sample policy establishes operational standards for the physical security of a company’s data center.

The purpose of this sample policy is to reduce the risks of human error, theft, fraud or misuse of facilities.

This sample policy is designed to help organizations prevent unauthorized access, damage and interference to business pr...

This sample memo serves as a report of an internal audit function’s high-level assessment of the security access badges ...

This tool contains four sample policies that establish a company’s guidelines regarding secure and consistent system pas...

In this sample policy, we outline the standards for applying separation of duties to protect a company’s information ass...

This tool contains two sample work programs that provide general steps organizations can take when conducting a security...

The purpose of this policy is to create and maintain a physically secure environment that protects company property and ...

This tool contains three sample policies that define procedures for ensuring that access to all systems and applications...

This work program sample can be used by organizations to measure the infrastructure for an implemented time and labor sy...