Home / Resources / Insights and Expertise / Audit Programs and Tools

Audit Programs and Tools

Take on any assignment with confidence. Browse ISACA's expert-designed audit programs and practical tools to find the right approach for your organizational needs.

AI Impact Assessment Tool
Featured Tool

AI Impact Assessment Tool

This AI Impact Assessment Tool is designed to help enterprises consider the possible ethical consequences associated with their AI projects. This Tool will help enterprises evaluate how they develop AI systems and ensure the ethical impacts of those systems are acceptable and in line with other enterprise objectives.

Learn More

Audit Programs and Tools

Layout

List Layout Card Layout

Filters

Domain

Credentials

Subjects

Language

15 of 47 Results

Biometrics Audit Program
Audit Program

Biometrics Audit Program | Digital | English

Strengthen biometric security with our updated audit program—assess risks, enhance resilience, and ensure compliance for secure, reliable biometric systems.
VPN Security Audit Program
Audit Program

VPN Security Audit Program | Digital | English

Ensure your enterprise VPN is secure with ISACA’s VPN Security Audit Program. This audit program provides control objectives, testing, and best practices for governance, configuration, operations, and monitoring—helping auditors evaluate and strengthen VPN security.
PCI DSS v4.0 Audit Program
Audit Program

PCI DSS v4.0 Audit Program | Digital | English

The Payment Card Industry Data Security Standard (PCI DSS) is a framework designed by major credit card brands that lays a foundation of stringent security controls to reduce fraud as it pertains to cardholder data.
ISACA Cybersecurity Audit Program: Based on the NIST Cybersecurity Framework 2.0
Audit Program

Cybersecurity Audit Program: Based on the NIST Cybersecurity Framework 2.0 | Digital | English

ISACA has updated its Cybersecurity Audit Program, adapted from the National Institute of Standards and Technology (NIST) Cybersecurity Framework 2.0 (released in February 2024).
Artificial Intelligence Audit Toolkit
Audit Program

Artificial Intelligence Audit Toolkit | Digital | English

Strengthen your audits as AI becomes central to enterprise operations. Use this toolkit to assess, evaluate, and guide AI systems under increasing scrutiny.
Zero Trust Audit Program
Audit Program

Zero Trust Audit Program | Digital | English

The Zero Trust Audit Program references various areas of focus that should be reviewed to determine the effectiveness of a Zero Trust program.
Google Cloud Platform Audit Program
Audit Program

Google Cloud Platform Audit Program | Digital | English

With the continued growth and adoption of Google® Cloud Platform (GCP®) now representing the third largest provider of cloud services, ISACA has developed an audit program that helps auditors assess and test control coverage adequacy and effectiveness of GCP® services.
Ransomware Readiness Audit Program
Audit Program

Ransomware Readiness Audit Program | Digital | English

Common governance, security, audit and assurance practices and processes can be employed to establish a foundational capability to respond to a ransomware incident.

Identity and Access Management Audit Program
Audit Program

Identity and Access Management Audit Program | Digital | English

The ISACA Identity and Access Management Audit Program provides specific testing and evaluation criteria to assist auditors in assessing the adequacy of safeguards in place to mitigate IAM risks.

Physical and Environmental Security Audit Program
Audit Program

Physical and Environmental Security Audit Program | Digital | English

Cybersecurity and audit practitioners may talk in terms of physical security being a part of cybersecurity or physical security being a subset of cybersecurity.
Database Audit Program
Audit Program

Database Audit Program | Digital | English

Databases, comprised of data and database management systems, store data so that they can be used by different programs without concern for the data structure or organization.
COBIT for DevOps Audit Program
Audit Program

COBIT for DevOps Audit Program | Digital | English

ISACA developed this audit program as a companion to COBIT Focus Area: DevOps, Using COBIT 2019. The focus area publication describes how COBIT framework concepts apply to DevOps and is intended to help enterprises evaluate management practices important to the development of an effective governance system over DevOps.
Blockchain Audit Program
Audit Program

Blockchain Framework Audit Program | Digital | English

The adoption of blockchain by diverse industries such as health care and real estate has effectively diminished blockchain's strong association with cryptocurrency. These industries, like so many others, decided to leverage the enhanced security, traceability, and efficiency that blockchain offers.

FREE to ISACA Members
WAITBC
Audit Program

IT Business Continuity Audit Program | Digital | English

Maintaining operations in the face of incremental changes as well as sudden disruption is an enterprise-wide goal that is facilitated through business continuity programs. Given the requisite participation of all operational functions across the organization in these programs, IT audit has an opportunity to leverage its detailed knowledge of the enterprise’s applications and systems and business operations.

FREE to ISACA Members
Microsoft Azure Audit Program
Audit Program

Azure Audit Program | Digital | English

In a cloud provider market comprised of solid frontrunners such as Amazon Web Services (AWS) and Microsoft Azure (Azure) as well as newcomers, auditors have a dual challenge: having familiarity with leading cloud computing platforms while keeping pace with cloud trends.

FREE to ISACA Members
Load More
California Consumer Privacy Act (CCPA) Audit Program
Audit Program

California Consumer Privacy Act (CCPA) Audit Program | Digital | English

One of the challenges that auditors face with compliance initiatives is providing assurance as expectations change. Data privacy is no exception. In the U.S., while some states have passed consumer privacy laws, remaining states have taken action ranging from creating data privacy task forces to having legislation in committee.
Security Incident Management Audit Program
Audit Program

Security Incident Management Audit Program | Digital | English

Unplanned incident preparation for many enterprises includes business continuity programs, disaster recovery plans and information security strategies. While looking at some of the same elements as these incident preparation tactics – namely the security triad of confidentiality, integrity, and availability – security incident management differs in that it poises enterprises for the identification and analysis of threats or incidents.
Amazon Web Services (AWS) Audit Program
Audit Program

Amazon Web Services (AWS) Audit Program | Digital | English

The primary purpose of the Amazon Web Services (AWS) Audit Program is to provide a means for organizations to evaluate their deployments of AWS. This assessment facilitates assurance that the configuration and maintenance of AWS services support business objectives.

FREE to ISACA Members
Audit Program
Audit Program

CASB Audit Program | Digital | English

With increased adoption of cloud services, enterprises have shown an interest in leveraging the flexibility and agility offered by cloud platforms. Along with those advantages, however, comes the need to consider potential risks such those associated with the various deployment models, identity management, and compliance with data drive regulations to which the enterprise is subject.
Blockchain Preparation Audit Program
Audit Program

Blockchain Preparation Audit Program | Digital | English

As blockchain is still an emerging technology, there is not yet a published uniform auditing standard. However, this program is intended to help organizations identify and develop key policies, procedures and controls to mitigate risk and streamline processes.

FREE to ISACA Members
Audit Program
Audit Program

Application Containers Audit Program | Digital | English

With application virtualization, the number of applications in the hosted environment can be increased without a corresponding increase in the number of servers.

FREE to ISACA Members
Audit Program
Audit Program

Microsoft SQL Server 2016 Audit Program | Digital | English

With GDPR and data privacy initiatives currently the focus of many enterprises, now might be a good time to take a new look at existing opportunities to incorporate features that protect sensitive and confidential data.
Audit Program
Audit Program

Microsoft Exchange Server 2016 Audit Program | Digital | English

While email may be the functionality that most users identify when thinking of Microsoft Exchange, the pairing of Exchange with clients such as Microsoft Outlook has broadened Exchange’s functionality beyond email.

FREE to ISACA Members
Audit Program
Audit Program

GDPR Audit Program Bundle | Digital | English

The GDPR audit program bundle offers a holistic framework for reviewing all data-processing practices in the context of GDPR.

Audit Program
Audit Program

GDPR Audit Program for Small and Medium Enterprises | Digital | English

As of 25 May 2018, GDPR gives EU residents control over their personal data wherever in the world they or their data may reside. It not only standardizes regulation across the EU and the European Economic Area (EEA); GDPR also affects all enterprises that process data from EU/EEA countries.

Audit Program
Audit Program

HIPAA Audit Program | Digital | English

The Health Insurance Portability and Accountability Act (HIPAA) was created to provide privacy and security for protected health information (PHI). While HIPAA provides covered entities with standards for safeguarding PHI, the Health Information Technology for Economic and Clinical Health Act (HITECH) also plays a role in the security of PHI through its establishment of breach notification requirements.
Audit Program
Audit Program

CIS Critical Security Controls Audit Program | Digital | English

The objective of a cyber security audit is to provide management with an evaluation of the effectiveness of cyber defense, with a focus on the most fundamental and valuable actions that each organization should take.
Audit Program
Audit Program

Shadow IT Audit Program | Digital | English

The objective of the Shadow IT Audit Program is to provide management with an evaluation of how effectively shadow IT is being governed, monitored and managed.

FREE to ISACA Members
Audit Program
Audit Program

Windows File Server Audit Program | Digital | English

The objective of the Windows File Server Audit Program is to ensure data confidentiality, integrity and availability around the enterprise’s server practices. Assessment of the controls around Windows File Servers facilitates assurance that identification and resolution of server vulnerabilities support business objectives.

Audit Program
Audit Program

Secure Shell Protocol (SSH) Audit Program | Digital | English

Provides enterprises with a means to assess the effectiveness of their use of the SSH protocol, including key management and applicable SSH controls.

FREE to ISACA Members
Audit Program
Audit Program

Mobile Computing Audit Program | Digital | English

The Mobile Computing Audit Program helps you assess the effectiveness of the controls around risk associated with mobile computing. Through a mobile computing audit, IT auditors can assess their organizations’ practices around areas such as remote access, data loss and malware.
Audit Program
Audit Program

Cloud Computing Management Audit Program | Digital | English

Objective—Provide stakeholders with an assessment of the effectiveness of the cloud computing service provider’s internal controls and security, identify internal control deficiencies within the customer organization and its interface with the service provider and provide audit stakeholders with an assessment of the quality of and their ability to rely upon the service provider’s attestations regarding internal controls.

FREE to ISACA Members
Audit Program
Audit Program

Change Management Audit Program | Digital | English

Objective: Perform a review of the change management process to provide management with assurance that the process is controlled, monitored and is compliance with good practices. Format: ZIP

FREE to ISACA Members
Audit Program
Audit Program

IT Risk Management Audit Program | Digital | English

IT audit and assurance professionals are expected to customize this document to the environment in which they are performing an assurance process. This document is to be used as a review tool and starting point.

FREE to ISACA Members
Audit Program
Audit Program

European Cybersecurity Audit Program | Digital | English

As part of the ISACA European Cybersecurity Implementation Series, this audit program provides management with an impartial and independent assessment relating to the effectiveness of cybersecurity and related governance, management and assurance, with a focus on cybersecurity standards, guidelines and procedures as well as on implementation and governance of these activities.

FREE to ISACA Members
Audit Program
Audit Program

Identity Management Audit Program | Digital | English

The Identity Management Audit review will provide management with an independent assessment relating to the effectiveness of identity management and its policies, procedures and governance activities. The review will focus on IdM standards, guidelines and procedures as well as on the implementation and governance of these activities.

FREE to ISACA Members
Audit Program
Audit Program

eCommerce & Public Key Infrastructure Audit Program | Digital | English

The major objectives of the e-commerce/PKI Audit review are to: Provide management with an independent assessment of the effectiveness of the architecture and security of the e-commerce and PKI environments and their alignment with the enterprise's IT security policies and architecture and with industry good practices.

FREE to ISACA Members
Audit Program
Audit Program

IPv6 Security Audit Program | Digital | English

The major objectives of the IPv6 networking audit review are to: Provide management with an independent assessment of the effectiveness of the IPv6 network’s architecture, security and alignment with the enterprise’s networking and IT security policies and architecture.

FREE to ISACA Members
Audit Program
Audit Program

Social Media Audit Program | Digital | English

The objective of the social media Audit review is to provide management with an independent assessment relating to the effectiveness of controls over the enterprise’s social media policies and processes.

FREE to ISACA Members
Audit Program
Audit Program

Microsoft SQL Server Database Audit Program | Digital | English

The Microsoft® SQL Server® Database Audit Program is designed to provide a relatively complete guide to the audit of SQL Server. This Audit program focuses on configuration of the relevant Microsoft SQL Server database implementations.

FREE to ISACA Members
Audit Program
Audit Program

Mobile Computing Security Audit Program | Digital | English

The mobile computing security Audit review will provide management with an assessment of mobile computing security policies and procedures and their operating effectiveness.

FREE to ISACA Members
Audit Program
Audit Program

Information Security Management Audit Program | Digital | English

The information security management audit review will: Provide management with an assessment of the effectiveness of the information security management function. Evaluate the scope of the information security management organization and determine whether essential security functions are being addresses effectively.

FREE to ISACA Members
Audit Program
Audit Program

Systems Development and Project Management Audit Program | Digital | English

The objectives of the systems development and project management audit/ assurance review are to: Provide management with an independent assessment of the progress, quality and attainment of project/program objectives at defined milestones within the project/program.

FREE to ISACA Members
Audit Program
Audit Program

Generic Application Audit Program | Digital | English

The objectives of the applications review are to: Provide management with an independent assessment of efficiency and effectiveness of the design and operation of internal controls and operating procedures. Provide management with the identification of application-related issues that require attention.

FREE to ISACA Members
Audit Program
Audit Program

Outsourced IT Environments Audit Program | Digital | English

The practice of outsourcing IT has experienced consistent growth for several years. Enterprises are choosing to concentrate on their core capabilities, cost reduction and the ability to tap into specialized resources.

FREE to ISACA Members
COBIT for DevOps Audit Program, Japanese
Audit Program

COBIT for DevOps Audit Program | Digital | Japanese

ISACA は、COBIT® 2019を活用し、本監査プログラムを COBIT フォーカス エリア: DevOps, のコンパニオンとして開発しました。
Blockchain Audit Program, Chinese
Audit Program

Blockchain Framework Audit Program | Digital | Chinese

区块链在医疗保健、房地产等各类行业中的应用，已经有效弱化了区块链和加密货币之间的紧密关联

Custom Training Programs

Looking to train your team? We can customize virtual training and certification programs for every need.

GET STARTED