The IT Audit Checklist Series

The IT Audit Checklist Series from the IT Compliance Institute.
New IT Audit Checklist: Privacy and Data Protection

The IT Audit Checklist for Privacy and Data Protection includes:
270 specific checklist items to help assess your internal audit readiness
Advice on assessing the robustness of privacy controls
Pointers on audit planning, preparation, testing, and reporting
Clarification on what auditors want (and don't want) to see
What Is This Paper About?
This paper supports an internal audit of the organization's regulatory, legal, contractual and reputation protection requirements to maintaining the confidentiality and integrity of sensitive information related to itself, employees, customers, business partners, and other entities.
The paper includes advice on assessing the robustness of privacy controls; guidance on how management and auditors support privacy policies and procedures; and information on ensuring continual improvement of privacy practices.


(Requires brief registration for non-members)
Also in the IT Audit Checklist Series
IT Audit Checklist: Logging, Monitoring, and ReportingChecklist for assessing the existence and robustness of logging, monitoring, and reporting functions. Includes 182 specific checklist items.
Download
(requires brief registration for non-members)
IT Audit Checklist: Change ManagementChecklist supporting an internal audit of the organization's change management policies in order to verify compliance and look for opportunities to improve efficiency, effectiveness, and economy. Includes 187 specific checklist items.
Download
(requires brief registration for non-members)
IT Audit Checklist: Payment Card Industry (PCI)Advice on assessing the robustness of PCI controls, recommendations for avoiding common PCI compliance failures, and information on ensuring continual improvement of IT security efforts. Includes 54 specific checklist items.
Download
(requires brief registration for non-members)
IT Audit Checklist: Information SecuritySupports an internal audit of the organization's information security program with guidance on improving information security programs and processes. Includes 228 specific checklist items.
Download
(requires brief registration for non-members)
IT Audit Checklist: IT Governance and StrategyGuidance on assessing the completeness, effectiveness, and sustainability of existing IT governance and strategy. Includes 74 specific checklist items.
Download
(requires brief registration for non-members)
IT Audit Checklist: Risk ManagementAdvice on the necessary preparation, planning, and communication strategies involved in a sucessful risk-management audit. Includes 80 specific checklist items.
Download
(requires brief registration for non-members)
About the IT Audit Checklist Series
The ITCI IT Audit Checklists provide practical guidance for IT, compliance, and business managers on preparing for successful internal audits of various aspects of their operations. In addition to helping managers understand what auditors look for and why, the IT Audit Checklists can also help managers proactively complete self assessments of their operations, thereby identifying opportunities for system and process improvements that can be performed in advance of actual audit.