IT General Controls (ITGC) Audit Readiness Playbook
64 professional files (6 PDFs + 58 Excel workbooks) | 349+ spreadsheet tabs | 2,730+ rows of structured content | 11 organised folders
ITGC audit findings are among the most common and most damaging results in SOX compliance, SOC examinations, and regulatory inspections. The same deficiencies appear year after year: segregation of duties gaps, incomplete access reviews, undocumented change management, and missing evidence. This playbook gives you the complete toolkit to achieve and sustain ITGC audit readiness across all control domains.
WHAT YOU GET: A THREE-PHASE JOURNEY
Phase 1: Diagnose. Seven domain assessments (30 questions each, 210 total) evaluate ITGC maturity across access management, change management, IT operations, program development, backup/recovery, segregation of duties, and audit evidence management.
Phase 2: Set Goals. Five PM template workbooks with remediation roadmaps, control gap trackers, evidence collection calendars, and audit preparation milestone plans.
Phase 3: Implement. Nine operational runbooks covering access reviews, PAM controls, change ticket compliance, backup validation, SoD matrices, and pre-audit walkthroughs.
7 DOMAIN ASSESSMENTS (210 QUESTIONS)
• Logical Access Management (provisioning, deprovisioning, PAM, MFA)
• Change Management and Release Controls
• IT Operations and Job Scheduling
• Program Development and SDLC Controls
• Data Backup, Recovery, and Business Continuity
• Segregation of Duties (SoD)
• Audit Evidence and Documentation Management
9 OPERATIONAL RUNBOOKS
• User Access Review (UAR) Execution and Documentation Runbook
• Privileged Access Management (PAM) Control Checklist
• Change Management Ticket Compliance Review Template
• Emergency Change and Break-Glass Procedure and Retrospective Guide
• Batch Job Monitoring and Exception Handling Checklist
• Backup Validation and Recovery Test Execution Runbook
• Segregation of Duties Matrix Design and Conflict Resolution Template
• Audit Evidence Collection Calendar and Completeness Tracker
• ITGC Control Self-Assessment and Pre-Audit Walkthrough Guide
WHO THIS IS FOR: IT Compliance Managers, Internal Audit Teams, IT Directors, SOX Programme Managers, External Audit Liaison Teams, and GRC Consultants.
Aligned with COSO, COBIT 2019, SOC 2 TSC, SOX Section 404, ISACA ITAF, PCAOB AS 2201, and NIST SP 800-53 Rev 5.
Instant download. Start your ITGC readiness assessment today.
Got a question about the product? Email us at support@flevy.com or ask the author directly by using the "Ask the Author a Question" form. If you cannot view the preview above this document description, go here to view the large preview instead.
Source: Best Practices in MIS Excel: IT General Controls ITGC Audit Readiness Playbook Excel (XLSX) Spreadsheet, Gerard Blokdijk
|
Download our FREE Digital Transformation Templates
Download our free compilation of 50+ Digital Transformation slides and templates. DX concepts covered include Digital Leadership, Digital Maturity, Digital Value Chain, Customer Experience, Customer Journey, RPA, etc. |