• Public Utility IT Audit Checklist

    Use this checklist to assess IT controls, operational readiness, and remediation needs across the public utility systems in scope.

  • Audit Metadata

  • Audit Date*
     - -
    2 digit month, 2 digit day, 4 digit year
  • Audit Type*

  • Scope and Environment

  • Systems in Scope*
  • Environment Type*

  • Access Management

  • Is user access reviewed regularly?*
  • Is multi-factor authentication required for privileged and remote access?*
  • Are shared accounts in use?*
  • User access review evidence and exceptions

  • Security Operations and Technical Controls

  • Patch Management Status*
  • Vulnerability Scanning Status*
  • Endpoint Protection Status*
  • Network Segmentation and Firewall Status*
  • Logging and Monitoring Status*
  • Remote Access Security Status*

  • Backup, Recovery, and Continuity

  • Backup Frequency*
  • Backup Test Status*
  • Last Successful Restore Test Date
     - -
    2 digit month, 2 digit day, 4 digit year
  • Offsite or Immutable Backup Present*
  • Recovery Time Objective Met*
  • Continuity Plan Available for Critical Systems*

  • Incident Response and Change Management

  • Incident response plan available?*
  • Date of last incident drill or tabletop
     - -
    2 digit month, 2 digit day, 4 digit year
  • Change management approval process followed?*

  • Compliance Evidence and Findings

  • Audit findings*

  • Follow-up Actions and Reviewer Sign-off

  • Target Completion Date*
     - -
    2 digit month, 2 digit day, 4 digit year
  • Follow-up Review Needed*
  • Should be Empty:
Select theme: