ITRM Project Closeout Checklist
Full Name
*
First Name
Last Name
Email
*
example@example.com
Client
*
Project Code
*
Project Name
*
Final deliverable report credentials
*
Edit deliverable report credentials
*
Select applicable service line(s)
Ethical Hacking
Smartsheet Project Plan/Status Updates
*
Completed
Not Completed
Pre-Assessment Form
*
Completed
Not Completed
Evidence Request List (ERL)
*
Completed
Not Completed
Status Report
*
Completed
Not Completed
Draft Report
*
Completed
Not Completed
Final Report
*
Completed
Not Completed
Kickoff Deck
*
Competed
Not Completed
Executive Presentation
*
Competed
Not Completed
Deployable(s) Cleaned & Updated
*
Competed
Not Completed
Client Data Deleted from All Team Devices
*
Competed
Not Completed
Documents & Working Documents Folder Deleted
*
Competed
Not Completed
Final Health Call
*
Competed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
Security Risk Assessment (SRA)
Smartsheet project plan/ status updates
*
Completed
Not Completed
Pre-assessment form
*
Completed
Not Completed
Evidence Request List (ERL)
*
Completed
Not Completed
Status Report
*
Completed
Not Completed
Draft Report
*
Completed
Not Completed
Final Report
*
Completed
Not Completed
Kick-off deck
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Application Questionnaire
*
Completed
Not Completed
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Added Project Values to the
Maturity Benchmark Data Spreadsheet
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
SOC 2
Smartsheet Project Plan/ Status Updates
*
Completed
Not Completed
Pre-Assessment Form
*
Completed
Not Completed
Status Report
*
Completed
Not Completed
Draft Report
*
Completed
Not Completed
Final Report
*
Completed
Not Completed
Kickoff Deck
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Pre-Audit Questionnaire
*
Completed
Not Completed
Letter of Engagement
*
Completed
Not Completed
Engagement Compliance Documentation Folder
*
Client Acceptance and Continuance Evaluation Form
Understanding the Service Organization and Engagement Scope
Engagement Independence Compliance and Nonattest Services Documentation
Pre-Audit Compliance Documentation Folder
*
Engagement Strategies Memorandum
Attest Engagement Covered Member Independence Checklist
Readiness Compliance Documentation Folder
*
Walktrough Documentation Form for a SOC 2 Engagement (if applicable)
Description Criteria for a Description of a Service Organization's System
Examination & Control Testing Compliance Documentation Folder
*
Determining Whether Ctrls Are Suitably Designed
Supervision, Review, and Approval Form
Readiness Evidence Request List
*
Completed
Not Complete
Attestation Evidence Request List (ERL)
*
Completed
Not Complete
Attestation Test Plan Workbook)
*
Completed
Not Completed
Service Auditor's Report - Signed
*
Completed
Not Completed
Management's Assertion - Signed
*
Completed
Not Completed
Management's Representation Letter - Signed
*
Completed
Not Completed
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
Medical Device
Smartsheet Project Plan/ Status Updates
*
Completed
Not Completed
Pre-assessment form
*
Completed
Not Completed
Evidence Request List (ERL)
*
Completed
Not Completed
Status Report
*
Completed
Not Completed
Draft Report
*
Completed
Not Completed
Final Report
*
Completed
Not Completed
Kick-off Deck
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
Staff Augmentation
Smartsheet Project Plan/ Status Updates
*
Completed
Not Completed
Pre-Assessment Form
*
Completed
Not Completed
Shared Documents (ensure all shared documents are deleted)
*
Completed
Not Completed
Status Reports
*
Completed
Not Completed
Draft Reports
*
Completed
Not Completed
Final Reports
*
Completed
Not Completed
Kick-off Deck
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Shared Documents
*
Completed
Not Completed
Ensure all shared documents are deleted
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
PCI
Smartsheet Project Plan/ Status Update
*
Completed
Not Completed
Pre-Assessment Form
*
Completed
Not Completed
Evidence Request List
*
Completed
Not Completed
Evidence (ensure all evidence containing PHI has been deleted)
*
Status Report
*
Completed
Not Completed
Draft Report
*
Completed
Not Completed
Final Report
*
Completed
Not Completed
Kick-off Deck
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
Cloud Security
Smartsheet Project Plan/ Status Updates
*
Completed
Not Completed
Pre-assessment form
*
Completed
Not Completed
Evidence Request List (ERL)
*
Completed
Not Completed
Status Report
*
Completed
Not Completed
Draft Report
*
Completed
Not Completed
Final Report
*
Completed
Not Completed
Kick-off Deck
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
HITRUST
Smartsheet Project Plan/ Status Updates
*
Completed
Not Completed
Pre-assessment Form
*
Completed
Not Completed
Population Request
*
Completed
Not Completed
Evidence Request List (ERL)
*
Completed
Not Completed
Test Papers
*
Completed
Not Completed
Status Reports
*
Completed
Not Completed
Draft Report (all 3 phases)
*
Completed
Not Completed
Final Report (all 3 phases)
*
Completed
Not Completed
Kick-off Deck (Phase 1/3)
*
Completed
Not Completed
Executive Presentation
*
Completed
Not Completed
Completed Project Performance Feedback
*
Completed
Not Completed
Certification Letter
*
Completed
Not Completed
Final HITRUST Report (issued by HITRUST)
*
Completed
Not Completed
Validated Report Agreement
*
Completed
Not Completed
Representation Letter
*
Completed
Not Completed
Organizational Overview and Scope Document
*
Completed
Not Completed
QA Checklist
*
Completed
Not Completed
External Assessor Timesheet
*
Completed
Not Completed
Readiness Assessment Report (Internal)
*
Completed
Not Completed
Remediation Plan (Internal)
*
Completed
Not Completed
Performance Reviews
*
Completed
Not Completed
Population Workbook
*
Completed
Not Completed
Assessment Workbooks
*
Completed
Not Completed
HITRUST Report or Interim Letter
*
Completed
Not Completed
Pulled from MyCSF
Moved Over Evidence from Extranet to Intranet
*
Completed
Not Completed
Final Health Call
*
Completed
Not Completed
Final Health Call Explanation
*
If the final health call was not scheduled, please explain why.
If any of the checklist items were marked as 'Not Complete', list them here and explain why
*
Submit
Should be Empty: