Registers, worksheets and forms you can use on Monday.
Every course produces an artifact. These are the blank versions, written by the association: control ownership matrices, sampling worksheets, risk registers, auditor question logs, data sharing records. Four are included with Associate membership.
Data Sharing Decision Record
One page per share: what data, with whom, channel, purpose, end date, how access is revoked and what copies remain afterwards.
.docx · from DGV-230
Become a member to download The course behind itData Room Setup and Close-Out Checklist
Preparing a diligence or vendor data room, watermarking and permissions, and the close-out that removes access, exports and cached copies.
.docx · from DGV-230
Become a member to download The course behind itOffboarding Data Recovery Checklist
Everything a departing person or contractor may hold: devices, personal cloud, shared links, mailboxes, backups and analytics extracts.
.docx · from DGV-230
Become a member to download The course behind itObligation Register (starter)
The obligations your role touches, who owns each, and the evidence that proves it. You build your first one in DTF-120, Reading a Regulation Without a Lawyer.
.xlsx · from DTF-120
Become a member to download The course behind itControl Ownership Matrix
Accountable owner per control, named performers per task, review cadence, and the escalation path when a task slips.
.xlsx · from AUD-201
Included with Practitioner The course behind itControl Owner Attestation Form
What an owner is attesting to, the period, the exceptions declared, and the signature block auditors accept.
.docx · from AUD-201
Included with Practitioner The course behind itPopulation and Sampling Worksheet
Population definition, completeness argument, extraction method, sample size rationale and the selected items.
.xlsx · from AUD-210
Included with Practitioner The course behind itEvidence Calendar and Index
Evidence per control with cadence, owner, retention and location, indexed to two frameworks.
.xlsx · from AUD-220
Included with Practitioner The course behind itWalkthrough Script
The narrative, the systems shown, the questions expected and the artefacts to have open, per control.
.docx · from AUD-240
Included with Practitioner The course behind itAuditor Question Log
Every question, who answered, the agreed answer, the evidence cited and the date, so nobody contradicts anybody.
.xlsx · from AUD-240
Included with Practitioner The course behind itFindings Response and Remediation Plan
Finding, management response, owner, remediation date, compensating control and the evidence of closure.
.docx · .xlsx · from AUD-240
Included with Practitioner The course behind itScope Decision Record
What is in scope, what is deliberately excluded, the justification per exclusion and the trigger that reopens it.
.docx · from AUD-250
Included with Practitioner The course behind itAccess Review Pack
Reviewer instructions, entitlement extract layout, reviewer decisions, revocation tracking and the completeness statement.
.xlsx · from CYB-240
Included with Practitioner The course behind itRisk Register
Scenario, inherent and residual scoring, treatment, accountable owner, acceptance expiry and the KRI that would move it.
.xlsx · from OPS-201
Included with Practitioner The course behind itRisk Assessment Workbook
Scoping, asset and process inventory, scenario construction, assumptions log and the challenge questions.
.xlsx · from RSK-201
Included with Practitioner The course behind itRisk Treatment and Exception Register
Treatment decisions, compensating controls, accountable executive, expiry date and the review that closes or renews.
.xlsx · from RSK-220
Included with Practitioner The course behind itTrust Center Content Plan
What a trust center publishes, what stays behind an NDA, refresh cadence and the owner of each artefact.
.docx · from TRS-201
Included with Practitioner The course behind itAutomated Test Catalogue
Each automated test: assertion, data source, schedule, failure handling and the manual procedure it replaces.
.xlsx · from AUD-230
Included with Executive Practitioner The course behind itControl Maturity Model and Scorecard
Maturity levels defined so two assessors agree, control scoring sheet and the quarterly movement report.
.xlsx · from AUD-260
Included with Executive Practitioner The course behind itRisk Quantification Worksheet
Frequency and magnitude ranges with calibration notes, the loss model, and the decision the number supports.
.xlsx · from RSK-210
Included with Executive Practitioner The course behind itRisk Appetite Statement and KRI Set
Appetite statements tied to measurable indicators, thresholds, escalation and the one-page board view.
.docx · .xlsx · from RSK-230
Included with Executive Practitioner The course behind itWritten and maintained by the association. New templates are added as members ask for them.