Skip to Content

Supplemental Guidance

Supplemental Guidance

Supplemental Guidance provides detailed guidance for conducting internal audit activities. These include topical areas, sector-specific issues, as well as processes and procedures, techniques, programs, step-by-step approaches, and examples of deliverables.

View new guidance releases here!

Model Internal Audit Charter Tool and User's Guide

The model internal audit charter is updated to align with the new Global Internal Audit Standards.

Global Technology Audit Guides

GTAG: Auditing Network and Communications Management

“Auditing Network and Communications Management” offers a broad set of related processes that internal...

Practice Guide: Integrated Approaches to Internal Auditing

To help auditors enhance and improve deliverables while considering culture, organization maturity, and...

Load More...

IIA Guidance

Assessing Cybersecurity Risk: The Three Lines Model
Auditing Business Applications
Auditing Cyber Incident Response and Recovery
Auditing Cybersecurity Operations: Prevention and Detection
Auditing Identity and Access Management
Auditing Insider Threat Programs
Auditing IT Governance (Previously GTAG 17)
Auditing IT Projects (Previously GTAG 12)
Auditing Mobile Computing
Auditing Network and Communications Management
Business Continuity Management (Previously GTAG 10)
Continuous Auditing: Coordinating Continuous Auditing and Monitoring to Provide Continuous Assurance, 2nd Edition (Previously GTAG 3)
Data Analysis Technologies (Previously GTAG 16)
Fraud Prevention and Detection in an Automated World (Previously GTAG 13)
Information Technology Outsourcing, 2nd Edition (Previously GTAG 7)
Information Technology Risk and Controls, 2nd Edition (Previously GTAG 1)
IT Change Management: Critical for Organizational Success, 3rd Edition (Previously GTAG 2)
IT Essentials for Internal Auditors
Management of IT Auditing, 2nd Edition (Previously GTAG 4)
Understanding and Auditing Big Data