General IT Audit template

Hello,

I am tasked with doing an internal general IT audit for a small company. I've done some in the past but am wondering if any one here has a good template they use.

Thank you!

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

ansionnachcliste

Look up COBIT. It's a framework for IT technologies and their management.

TechGuru80

What exactly are you auditing?

https://www.nist.gov/sites/default/files/documents/cyberframework/framework-for-improving-critical-infrastructure-cybersecurity-core.xlsx

TheFORCE

TechGuru80 wrote: »

What exactly are you auditing?

https://www.nist.gov/sites/default/files/documents/cyberframework/framework-for-improving-critical-infrastructure-cybersecurity-core.xlsx

Exactly, what are you auditing? Any controls? Any policies?

Tje best place to start on things like that is to look at the company's internal policies, and procedure and then see if they are actually being followed or implemented.

snokerpoker

To me more specific I am tasked with creating a report of what the client currently has in production and making a couple of recommendations. I think I created a good report so far. I was just curious if any one had a template so to speak for this.