← Back to Survtapp
CHECKLIST
Technology & SaaS
IT Security Audit Checklist
Review core IT security controls across accounts, devices, and data.
Log in to use this template
Preview — how respondents will see this form
Access Control
Multi-factor authentication is enforced
*
Yes
No
Former employee accounts have been deactivated
*
Yes
No
Admin access is limited to those who need it
*
Yes
No
Devices & Software
Operating systems and software are up to date
*
Yes
No
Endpoint protection is installed and active
*
Yes
No
Data
Backups are running and have been tested
*
Yes
No
Sensitive data is encrypted at rest
*
Yes
No
Findings and remediation plan
Long answer…