Registers, worksheets and forms you can use on Monday.
Every course produces an artefact. These are the blank versions, written by the association: control ownership matrices, sampling worksheets, risk registers, auditor question logs, data sharing records. Four are free with a free membership.
Control Ownership Matrix
Accountable owner per control, named performers per task, review cadence, and the escalation path when a task slips.
.xlsx · from AUD-201
Included with Practitioner The course behind itControl Owner Attestation Form
What an owner is attesting to, the period, the exceptions declared, and the signature block auditors accept.
.docx · from AUD-201
Included with Practitioner The course behind itPopulation and Sampling Worksheet
Population definition, completeness argument, extraction method, sample size rationale and the selected items.
.xlsx · from AUD-210
Included with Practitioner The course behind itEvidence Calendar and Index
Evidence per control with cadence, owner, retention and location, indexed to two frameworks.
.xlsx · from AUD-220
Included with Practitioner The course behind itWalkthrough Script
The narrative, the systems shown, the questions expected and the artefacts to have open, per control.
.docx · from AUD-240
Included with Practitioner The course behind itAuditor Question Log
Every question, who answered, the agreed answer, the evidence cited and the date, so nobody contradicts anybody.
.xlsx · from AUD-240
Included with Practitioner The course behind itFindings Response and Remediation Plan
Finding, management response, owner, remediation date, compensating control and the evidence of closure.
.docx · .xlsx · from AUD-240
Included with Practitioner The course behind itScope Decision Record
What is in scope, what is deliberately excluded, the justification per exclusion and the trigger that reopens it.
.docx · from AUD-250
Included with Practitioner The course behind itAccess Review Pack
Reviewer instructions, entitlement extract layout, reviewer decisions, revocation tracking and the completeness statement.
.xlsx · from CYB-240
Included with Practitioner The course behind itAutomated Test Catalogue
Each automated test: assertion, data source, schedule, failure handling and the manual procedure it replaces.
.xlsx · from AUD-230
Included with Executive Practitioner The course behind itControl Maturity Model and Scorecard
Maturity levels defined so two assessors agree, control scoring sheet and the quarterly movement report.
.xlsx · from AUD-260
Included with Executive Practitioner The course behind itWritten and maintained by the association. New templates are added as members ask for them.