itgc

End-to-end IT general controls (ITGC) audit of a lab AD/PostgreSQL/git environment: code-driven evidence, sampling, workpapers, management letter. Synthetic company

Python-based ITGC testing toolkit for SOX control testing, audit findings, risk and control analysis, and security framework crosswalking.

autonomous AI agents for IT audit automation

Expert SOX 404 ITGC compliance guidance as a Claude Skill. PCAOB AS 2201, COSO 2013, Big Four audit methodology, plus a Build Chain of Custody pattern for modern engineering.

Segregation-of-duties and access review analysis for financial systems. Finds who can complete a fraud scheme alone. Python, no dependencies.

Simulated SOX ITGC control assurance lab with evidence workflows, control testing, remediation tracking, CISA KEV enrichment, anomaly detection, NIST/ISO mapping, and Grafana dashboards.

Automated ITGC database security audit for MySQL: detects excessive privileges, wildcard hosts, empty passwords and anonymous accounts, then exports an audit-ready CSV report.

ITGC change-management control testing on real open-source GitHub repositories: population extraction, attribute testing, sampling, exception analysis and audit workpapers (SOC 2 CC8.1, ISO 27001:2022 A.8.32).

Mock SOC 2 ITGC readiness audit — GRC/IT audit portfolio project

개발 및 보안 경험을 ITGC 통제 테스트와 감사 자동화 작업 표본으로 연결한 공개 포트폴리오

Educational FastAPI/PostgreSQL cybersecurity risk and ITGC assessment lab with traceable evidence, remediation tests and explicit limitations.

Self-hosted app suite on TrueNAS: single sign-on, session integrity, audit logging and change management, each enforced in code and proved by tests.

Automates SOX ITGC evidence collection and CAP generation for access and change management controls

Simulated ITGC audit and ISO/IEC 27001:2022 ISMS portfolio: control testing, risk register, SoA, internal audit and management review (fictional company)

A Python CLI tool that automates Azure ITGC control checks and maps findings to NIST CSF 2.0 — built from Big 4 audit experience.

Technology Risk, IT Audit and Cybersecurity GRC portfolio of Daniel Gladson Arulraj P.

MCP server over an ITGC audit workpaper pack: trace controls, findings and open items from any AI client

Excel model that audits user access across a company's systems — checks whether terminated employees still have active logins, flags employees holding two roles that shouldn't be combined, and confirms access was approved and reviewed on schedule. Built entirely with standard Excel formulas, no macros.

ITGC audit of user access and change management: SQL-based control testing, risk and control matrix, and an interactive Streamlit dashboard for tracking findings. Synthetic data.

This is my Use Case for the Udacity Nanodegree "Data Product Management"