This memo defines the process a company uses to update testing of internal controls for Sarbanes-Oxley compliance purpos...

This issue of Board Perspectives: Risk Oversight outlines important lessons for board members to consider as directors e...

The purpose of this work program—focused on access to programs and data—is to outline the IT general controls to be test...

The purpose of this audit program is to review an organization’s system backup procedures.

This audit program reviews an application that handles transactions related to leasing and renting commercial property.

This audit program focuses on auditing program change controls.

In this issue of The Bulletin, we discuss how facing change with confidence is crucial in a rapidly shifting business en...

Data conversion is the conversion of computer data from one format to another. This process flow details the steps invol...

This sample compliance work program can be modified for scope considerations that will depend on the extent of the softw...

This document outlines risks and controls common to the "deploy and maintain solutions" process in a risk control matrix...

This document outlines steps to audit an organization’s data management process and includes a self-assessment questionn...

This document outlines steps to audit an organization’s IT help desk process.