Create Printable PDF | Office of the New York State Comptroller

Select the sections to include in your PDF.

Browser Compatibility: Use Microsoft Edge or Google Chrome to create PDF. Other browsers may not be supported.

Create PDF of Entire Publication
Introduction to IT Governance
Responsibility for IT Internal Controls
IT Security Fundamentals
Security Self-Assessment
IT Security: Key 12 Areas of Concern
--Area #1 – IT Policy
--Area #2 – IT Security Training and Awareness
--Area #3 – Computer Hardware, Software, and Data Inventories
--Area #4 – Contracts and Service Level Agreements for IT Services
--Area #5 – Malware Protection
--Area #6 – Patch Management
--Area #7 – Access Controls
--Area #8 – Online Banking
--Area #9 – Wireless Network
--Area #10 – Firewalls and Intrusion Detection
--Area #11 – Physical Controls
--Area #12 – Information Technology Contingency Planning
Additional Resources
Security Self-Assessment: Questions