To evaluate the core systems holding the most valuable assets of a company, routine IT audits are carried out to evaluate their ability to protect these assets. This thesis proposes a model for auditing relational databases, which aims to fulfill multiple defined controls, but also some of the characteristics defined by the COBIT framework. The COBIT framework has also been the guideline for the controls implemented with the proposed model. A prototype has been developed, which consists of a TypeScript backend and a modern web interface made with React. Scenario-based testing of the prototype's functionality and usability has been done, and the discussion of the major results has been shown. Finally, the thesis concludes with the most important findings and the prototype results, offering a few possibilities for further work on the model and the prototype.
