Registers, worksheets and forms you can use on Monday.
Every course produces an artifact. These are the blank versions, written by the association: control ownership matrices, sampling worksheets, risk registers, auditor question logs, data sharing records. Four are included with Associate membership.
Control Ownership Matrix
Accountable owner per control, named performers per task, review cadence, and the escalation path when a task slips.
.xlsx · from AUD-201
Included with Practitioner The course behind itControl Owner Attestation Form
What an owner is attesting to, the period, the exceptions declared, and the signature block auditors accept.
.docx · from AUD-201
Included with Practitioner The course behind itPopulation and Sampling Worksheet
Population definition, completeness argument, extraction method, sample size rationale and the selected items.
.xlsx · from AUD-210
Included with Practitioner The course behind itEvidence Calendar and Index
Evidence per control with cadence, owner, retention and location, indexed to two frameworks.
.xlsx · from AUD-220
Included with Practitioner The course behind itWalkthrough Script
The narrative, the systems shown, the questions expected and the artefacts to have open, per control.
.docx · from AUD-240
Included with Practitioner The course behind itAuditor Question Log
Every question, who answered, the agreed answer, the evidence cited and the date, so nobody contradicts anybody.
.xlsx · from AUD-240
Included with Practitioner The course behind itFindings Response and Remediation Plan
Finding, management response, owner, remediation date, compensating control and the evidence of closure.
.docx · .xlsx · from AUD-240
Included with Practitioner The course behind itScope Decision Record
What is in scope, what is deliberately excluded, the justification per exclusion and the trigger that reopens it.
.docx · from AUD-250
Included with Practitioner The course behind itAccess Review Pack
Reviewer instructions, entitlement extract layout, reviewer decisions, revocation tracking and the completeness statement.
.xlsx · from CYB-240
Included with Practitioner The course behind itAutomated Test Catalogue
Each automated test: assertion, data source, schedule, failure handling and the manual procedure it replaces.
.xlsx · from AUD-230
Included with Executive Practitioner The course behind itControl Maturity Model and Scorecard
Maturity levels defined so two assessors agree, control scoring sheet and the quarterly movement report.
.xlsx · from AUD-260
Included with Executive Practitioner The course behind itWritten and maintained by the association. New templates are added as members ask for them.