Skip to main content
Himanshu Pokharkar

I make IT auditless intimidating.

Eight years of notes, tools, and templates from Big 4 and in-house audit.
Free for anyone doing the work.


What's on the desk.

Live entries. What is being tested, read, and drafted.

DateCategoryEntryStatus
20 SepTestingDORA ICT third-party controls at BerenbergIn progress
15 SepBuildingDORA Audit Mapper v2In progress
12 SepDrafting“Breaking In” — IT audit career guideDraft

Tools shipped and open-sourced.

TOOL · REGULATION

DORA Audit Mapper

652 paragraphs of the regulation, mapped so you don't scope a DORA audit from scratch again.

Read more →

TOOL · CYBER INTELLIGENCE

GRC News Assistant

A tiered, curated feed of cybersecurity news. Working demonstration of hands-on GRC engineering.

Read more →

The auditor's shelf.

What every IT auditor is expected to know, and where the primary sources live.


The feed.

AI-tiered cybersecurity intelligence for GRC professionals.

Last update: 2026-09-21 · 14:49 BSTArticles surfaced today: see feed for live count

Read the feed →