A.8.34 Audit Checklist

When to use this

Use this checklist when auditing protection of operational systems during audit testing and assurance activities.

Related controls

• A.8.34 Protection of Information Systems During Audit Testing
• A.8.34 Audit Evidence Pack

Audit checklist

• Audit testing scope is documented.
• Appropriate management approved the activity.
• Timing and business constraints are agreed.
• Tools and techniques are identified.
• Stop criteria and escalation contacts are defined.
• Access and tool use are logged.
• Testing does not alter data unless approved.
• Audit results are protected.
• Tool validation or approval exists where needed.
• Independence is considered.

Sampling record