This tool includes two sample audit programs that provide steps organizations can take to conduct a capital expenditure audit.

The questions included in this tool can be used to evaluate your project management office (PMO) functionality and processes.

Organizations can use this sample job description as a starting point to fully define the responsibilities and qualifications for a chief risk officer role.

This document provides two sample audit work programs for reviewing the expenditure cycle, with one leveraging computer-assisted auditing techniques (CAATs) in the audit process.

This sample policy is designed to help organizations standardize the collection process and identify additional training needs.

This tool contains four sample policies that define best-practice guidelines and procedures for protecting company computers from viruses and managing virus infestation.

This capability maturity model can be used to measure the maturity of an organization’s business continuity management process and to assist its progress from the initial/ad-hoc state t...

The purpose of this policy is to ensure that information system resources and business processes are protected against service interruptions by developing, implementing and testing a DR...

This tool contains scorecards that provide various guidelines for managing and measuring the performance of an internal audit function.

This capability maturity model can be used to measure the maturity of an organization’s enterprise security process and to assist its progress from the initial/ad-hoc state toward the o...

The two sample questionnaires in this document can be used to perform a control self-assessment of the accounts receivable function.

Use the questions included in this tool to ensure that all changes to IT resources and infrastructure configurations are carried out in a planned and authorized manner.