Although this guidance was developed for IT audit and assurance practitioners, it will also help security and business professionals to apply the control objectives and audit steps to make scope areas more robust.

"These audit programs are templates designed to be starting points and can be easily customised to fit a specific operating environment," said Norm Kelson, CISA, CGEIT, CPA, lead author of the programs. "Developed by a global team of experienced assurance professionals, they represent the latest expertise, and are peer-reviewed for added value."

Members of ISACA can get all these audit programs for free. ISACA is charging US$45 for non-members.

ISACA has published additional audit programmes including:

• Apache Web Services Server Audit/Assurance Program