IT Audit Workbench Guide
Purpose
The Workbench consolidates evidence gaps, asset/control coverage, privileged-access review, changes since the previous assessment, and the 93-control auditor workspace.
Operating principle
Evidence first. Interpretation second. Human determination last. Automated findings are technical observations. Review fields allow an authorized assessor to record context, disposition, remediation and evidence references without rewriting raw collection.
Review cycle
- Refresh Workbench after a completed technical run.
- Review NO_DATA and Collection Error first.
- Confirm asset/control coverage.
- Review privileged access and change register.
- Save human review fields.
- Open control evidence before final auditor disposition.
Guide basis
R68 package: Audit-Workbench-Guide.html
Published as a website guide on 1 October 2026. Where a bundled reference is older, the version-specific guide and installed interface take precedence.