The OIC uses ICACA's Information Technology Assurance Framework (ITAF) to conduct its IT Audit and Assurance Reviews to help ensure the quality, consistency, and reliability of IT assessments.  ITAF also contains a helpful set of good practice-setting guidelines and procedures.

The Information Technology Assurance Framework (ITAFTM) is a comprehensive and good-practice-setting model that:

• Provides guidance on the design, conduct and reporting of IT audit and assurance assignments
• Defines terms and concepts specific to IT assurance
• Establishes standards that address IT audit and assurance professional roles and responsibilities, knowledge and skills, and diligence, conduct and reporting requirements

Monitoring represents one of the most overlooked, but most effective, means to get information on how well key controls are operating over time. Having this information supplies management with the necessary facts and knowledge to mitigate significant risks to the business and to ensure that operating, financial and compliance objectives are met (Monitoring Internal Controls Systems and IT - A Primer for Business Executives, Managers and Auditors on How to Embrace and Advance Best Practices, ISACA).

Read the Business Case for Continuous Controls Monitoring (CCM) to learn more.  You can also learn more on ISACA's site for Monitoring Internal Control Systems and IT.

Oracle Enhances Continuous Controls Monitoring Solution.