AI Checklist Generator

From the makers of Manifestly Checklists

Email address

Home > Consulting > ITGC checklist

ITGC checklist

1. Governance and Management

Ensure IT governance framework is established and documented.

Verify roles and responsibilities for IT management are defined.

Check for regular IT strategy reviews and updates.

Confirm alignment of IT goals with business objectives.

2. Access Control

Review user access management policies and procedures.

Ensure user access rights are granted based on the principle of least privilege.

Verify regular review of user access rights and roles.

Check for effective authentication mechanisms (e.g., passwords, multi-factor authentication).

3. Change Management

Confirm that a change management process is in place and documented.

Review change request approval processes.

Ensure testing and validation processes for changes are documented.

Verify that changes are communicated effectively to relevant stakeholders.

4. Data Management

Ensure data classification policies are established.

Verify data backup procedures are in place and tested regularly.

Check for data retention and disposal policies.

Review data integrity controls and monitoring processes.

5. Incident Management

Confirm that an incident response plan is established and documented.

Ensure regular training and awareness programs for incident response.

Review incident logging and tracking processes.

Verify that incidents are analyzed for root cause and lessons learned.

Here are some additional steps that could be included in the Incident Management section of your checklist

Establish clear roles and responsibilities for the incident response team

Ensure that incident classification criteria are defined and communicated

Implement a process for prioritizing incidents based on impact and urgency

Verify that communication protocols are in place for notifying stakeholders during an incident

Conduct regular incident response drills and simulations to test the effectiveness of the plan

Maintain an up-to-date inventory of critical assets and systems to aid in incident response efforts

Ensure that incidents are reported to the appropriate regulatory bodies as required

Review and update the incident response plan regularly to reflect changes in the organization or threat landscape

Implement a mechanism for capturing and documenting incidents in a centralized repository

Establish a process for post-incident reviews and reporting to stakeholders

6. IT Operations

Check that IT operational procedures are documented and followed.

Ensure monitoring of IT systems and services is in place.

Verify capacity management processes are established.

Review performance metrics and reporting processes.

7. Compliance and Audit

Confirm adherence to relevant regulatory and compliance requirements.

Ensure regular internal and external audits of IT controls.

Review audit findings and corrective action plans.

Verify that management reviews audit results and takes appropriate actions.

8. Security Management

Ensure information security policies are established and communicated.

Verify implementation of security controls (e.g., firewalls, antivirus).

Check for regular security assessments and vulnerability scans.

Confirm that security awareness training is conducted for all employees.

Download CSV Download JSON Download Markdown

Use in Manifestly

Related Checklists

Employee Orientation Checklist

A well-designed Employee Orientation Checklist helps to ensure that new employees receive a comprehensive introduction to the company and their job duties.

view →

Client Onboarding Checklist

A Client Onboarding Checklist is essential for ensuring a smooth and successful transition of new clients into a consulting engagement.

view →

Leave of Absence Checklist

A Leave of Absence Checklist is important to ensure that all necessary steps are taken to properly document and process employee absences.

view →

Performance Evaluation Checklist

Performance Evaluation Checklists are essential for measuring an employee's performance and providing feedback to ensure they are meeting the expectations of their role.

view →

Project Kickoff Checklist

A Project Kickoff Checklist is essential to ensure that all stakeholders are on the same page and that all project objectives and expectations are clearly defined.

view →

Data Security Checklist

A Data Security Checklist is an essential tool to ensure that an organization's data is secure and protected from unauthorized access.

view →

Employee Termination Checklist

A Employee Termination Checklist ensures all necessary steps are taken to ensure a smooth and compliant termination process.

view →

Risk Management Checklist

A Risk Management Checklist is a tool to help identify, assess, and manage potential risks to an organization and its stakeholders.

view →

Client Offboarding Checklist

The Client Offboarding Checklist is critical for ensuring a successful and thorough transition process, ensuring that all stakeholders are informed and any outstanding issues are resolved.

view →

Hey there! Here's a little about us or visit our recurring workflow SaaS: Manifestly Checklists

Light Dark