Identity and Access Management

The objective of this document is to provide policy and procedure guidance for conducting major activities in a company'...

The purpose of this work program is to determine whether the right security policies exist and determine if existing pol...

This 45-page work program outlines physical security best practices for data centers and information processing/storage ...

This memo outlines minimum IT controls around user access, change control, backup, privacy, licenses and document retent...

This memo focuses on IT SOX readiness procedures for an application, testing change management, computer operations and ...

This sample policy provides guidelines for securing user information.

This sample policy outlines procedures for the disclosure, protection and transfer of a company's private data.

This tool outlines the business risks associated with inappropriate access to systems, data or information and suggests ...

This sample policy outlines procedures for controlling access to and use of the Oracle eBusiness suite and database.

This sample establishes the standards and procedures for maintaining proper system access security at a company.

This sample audit report presents the results of an application access audit performed within a company’s IT environment...

This article covers the first two of eight recommendations Protiviti has for the 2018 audit committee agenda: periodic a...