ISACA® IS/IT Audit Programs and Tools

15 of 63 Results

AI Impact Assessment Tool | Digital | English

This AI Impact Assessment Tool is designed to help enterprises consider the possible ethical consequences associated with their AI projects.

Audit Program

Biometrics Audit Program | Digital | English

Strengthen biometric security with our updated audit program—assess risks, enhance resilience, and ensure compliance for secure, reliable biometric systems.

Audit Program

VPN Security Audit Program | Digital | English

Ensure your enterprise VPN is secure with ISACA’s VPN Security Audit Program. This audit program provides control objectives, testing, and best practices for governance, configuration, operations, and monitoring—helping auditors evaluate and strengthen VPN security.

Audit Program

PCI DSS v4.0 Audit Program | Digital | English

The Payment Card Industry Data Security Standard (PCI DSS) is a framework designed by major credit card brands that lays a foundation of stringent security controls to reduce fraud as it pertains to cardholder data.

Audit Program

Cybersecurity Audit Program: Based on the NIST Cybersecurity Framework 2.0 | Digital | English

ISACA has updated its Cybersecurity Audit Program, adapted from the National Institute of Standards and Technology (NIST) Cybersecurity Framework 2.0 (released in February 2024).

Audit Program

Artificial Intelligence Audit Toolkit | Digital | English

Strengthen your audits as AI becomes central to enterprise operations. Use this toolkit to assess, evaluate, and guide AI systems under increasing scrutiny.

Tool

Policy Template Library Toolkit | Digital | English

Policies are designed to formally document and communicate required and prohibited activities and behaviors to guide enterprise operational processes.

Audit Program

Zero Trust Audit Program | Digital | English

The Zero Trust Audit Program references various areas of focus that should be reviewed to determine the effectiveness of a Zero Trust program.

Audit Program

Google Cloud Platform Audit Program | Digital | English

With the continued growth and adoption of Google® Cloud Platform (GCP®) now representing the third largest provider of cloud services, ISACA has developed an audit program that helps auditors assess and test control coverage adequacy and effectiveness of GCP® services.

Tool

Privacy Regulatory Lookup Tool | Digital | English

Given the myriad privacy laws and regulations with which organizations must comply, many privacy professionals struggle to understand their compliance obligations.

Audit Program

Ransomware Readiness Audit Program | Digital | English

Common governance, security, audit and assurance practices and processes can be employed to establish a foundational capability to respond to a ransomware incident.

Audit Program

Identity and Access Management Audit Program | Digital | English

The ISACA Identity and Access Management Audit Program provides specific testing and evaluation criteria to assist auditors in assessing the adequacy of safeguards in place to mitigate IAM risks.

Tool

Risk Scenarios Tool Kit | Digital | English

The use of risk scenarios can enhance the risk management effort by helping the risk team understand and explain risk to business process owners and other stakeholders.

Tool

Risk Scenarios Starter Pack | Digital | English

This toolkit, free to ISACA members, includes 10 sample risk scenarios that practitioners can use and tailor to their specific context within their enterprises.

Audit Program

Physical and Environmental Security Audit Program | Digital | English

Cybersecurity and audit practitioners may talk in terms of physical security being a part of cybersecurity or physical security being a subset of cybersecurity.