Abstract: A method and system for automatically testing information technology control. The method includes automatically accessing a plurality of data results pertinent to a plurality of process-based leading indicators and a plurality of symptomatic lagging indicators, wherein the plurality of process-based leading indicators is correlated with the plurality of symptomatic lagging indicators. In addition, the method includes automatically aggregating at least a portion of the plurality of data results into at least one process control indicator for providing an overview picture of the IT control and the emerging risk for at least one process control area.