IT Controls

The following 164 items are listed by Content Data.

Policies & Procedures

Firewall Administration Policy

This tool contains two policies that establish procedures and requirements to ensure the appropriate protection and cont...
Subscriber Content
Mon, Jul 4, 2022
Checklists & Questionnaires

IT Change Management Process Questionnaire

Use the questions included in this tool to ensure that all changes to IT resources and infrastructure configurations are...
Subscriber Content
Mon, Mar 21, 2022
Methodologies & Models

Change Management Capability Maturity Model (CMM)

This capability maturity model can be used to measure the maturity of an organization’s change management process and to...
Subscriber Content
Mon, Feb 21, 2022
Policies & Procedures

IT Equipment and Information Control Policy

This policy sample establishes guidelines and procedures common to effective company equipment and system information pr...
Subscriber Content
Mon, Dec 20, 2021
Methodologies & Models

Access Controls Capability Maturity Model (CMM)

This capability maturity model can be used to measure the maturity of an organization’s access controls process and to a...
Subscriber Content
Mon, Dec 20, 2021
Methodologies & Models

Identity Access Management Capability Maturity Model (CMM)

This capability maturity model can be used to measure the maturity of an organization’s identity access management proce...
Subscriber Content
Mon, Dec 13, 2021
Policies & Procedures

Systems Audit Logging and Monitoring Policy

This sample policy is designed to help organizations define and comply with system audit logging and monitoring requirem...
Subscriber Content
Mon, Dec 13, 2021
Benchmarking Tools

Transaction Authority Risk Key Performance Indicators (KPIs)

This tool contains performance measures and questions an organization can use to enforce and ensure the validity of tran...
Subscriber Content
Mon, Dec 13, 2021
Audit Programs

Application Security Review and Testing Audit Work Program

This tool includes two sample audit programs that provide steps organizations can take to facilitate an application secu...
Subscriber Content
Mon, Nov 8, 2021
Policies & Procedures

Separation of Duties Policy

In this sample policy, we outline the standards for applying separation of duties to protect a company’s information ass...
Subscriber Content
Mon, Nov 1, 2021
Policies & Procedures

Telecommunication Usage Policy

Establish clear guidelines for using telecommunications systems, including password protocols, language standards and pr...
Subscriber Content
Mon, Oct 25, 2021
Audit Programs

Enterprise Resource Planning Security Audit Work Program

In this work program sample, we list general best-practice steps for the enterprise resource planning security process.
Subscriber Content
Mon, Aug 9, 2021