Control testing and reporting are the foundations of IT compliance, while integration is critical for sustainability. To uncover best practices for IT control testing, reporting, and integration, Forrester spoke with companies from a variety of industries having domestic and international IT operations. Our research uncovered three best practices — automate IT control testing, streamline report generation, and integrate control selection into IT operations. Assimilating these best practices into an IT compliance program provides the capability to sustain compliance with laws, regulations, industry standards, corporate policies, and contractual obligations while lowering the overall cost of IT compliance.