questions to ask in an audit for a large bank regarding IT systems & processes

Governance and Policy Framework

System Classification and Risk Assessment

Patch Identification and Evaluation

Testing and Validation

Deployment Process

Compliance Monitoring

Reporting and Communication

Training and Capability Development

Incident Management and Response

Third-Party and Vendor Management

Continuous Monitoring and Improvement

Related Checklists