Global Guidance

Global Guidance, referred to as Supplemental Guidance within the Global Internal Audit Standards^TM, comprises Global Practice Guides and Global Technology Audit Guides® (GTAGs®).

These guides, available for free to IIA members, provide detailed support and direction for conducting internal audit activities such as processes and procedures, techniques, step-by-step approaches, and examples of deliverables. In addition, sector-specific guides are available for public sector audit functions and financial services internal audit functions.

View the latest guidance releases here!

Global Technology Audit Guides

GTAG: Auditing Cybersecurity Operations: Prevention and Detection, 2nd Edition

Global Technology Audit Guides

GTAG: Auditing Identity and Access Management, 2nd Edition

Updated and aligned with the Global Internal Audit Standards.

Global Technology Audit Guides

GTAG: Auditing Cyber Incident Response and Recovery, 2nd Edition

Cyberattacks are consistently ranked among the most significant business risks.

Assessing Cybersecurity Risk: The Three Lines Model
Auditing Business Applications
UPDATED! Auditing Cyber Incident Response and Recovery, 2nd Edition
UPDATED! Auditing Cybersecurity Operations: Prevention and Detection, 2nd Edition
UPDATED! Auditing Identity and Access Management, 2nd Edition
Auditing Insider Threat Programs
Auditing IT Governance (Previously GTAG 17)
UPDATED! Auditing Mobile Computing, 2nd Edition
Auditing Network and Communications Management, 2nd Edition
IT Change Management: Critical for Organizational Success, 3rd Edition (Previously GTAG 2)
IT Essentials for Internal Auditors
Understanding and Auditing Big Data

View the latest guidance releases here!

Learn about IIA programs and partners.