ipl-logo

IT Infrastructure Audit Case Study

2512 Words11 Pages

5

Businesses or organizations throughout the world exhibit their own audit controls as well as observe specific procedures. When addressing IT audit issues, a business such as Asplundh Tree Expert, Inc. are known for their efficient audit procedures and internal practices. IT audit process effectiveness happens when an organization or business is adhereing or responding to set procedures. An organization may conduct several diverse audits, but consequently regardless of the audit type used, an audit is done to ensure a business or organization are using all resources available to them and for their benefit. Diverse IT audit selection ensures that the company set and meet goals and objectives that have been laid down by the international standards …show more content…

One example includes a financial audit or an IT infrastructure audit. Data will be given within this paper to address specific issues that might reside within the IT infrastructure audits. It is important to note that each audit process is specific to the tasks and objectives that are to be achieved. IT infrastruction audit processes, goals, controls, objectives and plans are all associated with IT infrastructure auditing (Ifinedo, 2012).
The primary cause of an IT infrastructure audit is to guarantee all IT resources available within a business or organization reach set goals and performance has been achieved while following the correct and the most appropriate processes.
The specific objectives of undertaking an IT infrastructure audit may include:
· Ensureing that the set infrastructure is compliant with the legal and regulatory requirements.
· Ensuring that the IT infrastructure enforces the confidentiality of its corporate data.
· Assessing whether the IT infrastructure in an organziation helps in attaining and maintaining data integrity.
· Ensureing that the IT infrastructure guarantees availability and reliability of the available …show more content…

The first step that the auditor should take is to gather as much information about any security procedures and policies that may have been in use following the information collected from the records available. Since each policy may have a different aspect that it works on, the findings from the audit may present evidence that may be vital in identifying the existing procedures or the absence of any policies or procedures. The existence of policies and procedures enables a company to reduce the occurrence or the impacts of a given risk. The lack of such policies may lead to reduced risk management

Show More
Related
630 Words | 3 Pages

Do we have a backup power system for our offices? Protection of customer personal information (in addition to security measures stated elsewhere in this audit checklist) 54. Do we only giving access to personal information to a person who is verified to be able to receive that information? 55.

Read More
1873 Words | 8 Pages

The first step of this would be to understand Smackey’s business and its industry. The auditors would need to know what type of risk would be involved in this particular industry. The next step would be for the auditor’s to gain a list of the client’s internal control procedures. This would help the auditors determine what type of documentation would be needed. Keller CPA would then need to be able to assess the control risk for each transaction related audit objective (Aren, et al., 2016).

Read More
149 Words | 1 Pages

The security controls, policies, procedures, and guidelines were tested using the security testing plan that was evaluated by a security team to correct and report flaws in the system design. The only major flaw doesn’t relate to the network or the physical system itself, but instead policies and procedures seem to be at the highest risk. Policies and procedures explain that the chain of custody during media transportation and disposal should be logged and tracked impeccably. I believe putting stronger controls in place for the transportation of media would lower the risk of exposed confidentiality tremendously. I believe each device used to transport should be trackable at any given time, rather than just by logs.

Read More
529 Words | 3 Pages

I need go through last year audit file and report to gain understanding of the entity, its nature, the principal activities carried on, accounting policies, and critical audit area And test checked trial balance, balance sheet and profit or loss statement to general ledger to ensure they are agree to each other because there is possible clients make changes in general ledger after financial statement has been prepared. I also need checked the opening balance of balance sheet items with last year audit report to ensure the amounts are agreed with last audited figure. Before do the audit, I need fill in audit control sheet then do audit planning and planning materiality

Read More
163 Words | 1 Pages

1. Tigard’s CAFR was audited by Moss Adams LLP and was signed by James C. Lanzarotta. 2. It appears that all GASB Required Supplementary Information is within the City of Tigard’s MD&A. No additions from the stated requirements from the textbook are apparent in Tigard’s MD&A.

Read More
961 Words | 4 Pages

(Outrigger case 113&114) For the human resources part, Outrigger have 26 full time IS professionals who dealing with hardware support and software support. (Outrigger case 115) And provide on-the-job technology training to workers to help staff familiar with the IS. (Outrigger case P116) 3 What should be, in your opinion, the role of the IS function at Outrigger Hotels and

Read More
1164 Words | 5 Pages

An IT audit is the examination and evaluation of an organization's information technology infrastructure, policies and operations. Information technology audits determine whether IT controls protect corporate assets, ensure data integrity and are aligned with the business's overall goals. 1.2.2 Objectives IT audit objectives concentrate on substantiating that the internal controls exist and are functioning as expected to minimize business risk. These audit objectives include assuring compliance with legal and regulatory requirements, as well as the confidentiality, integrity, and availability.

Read More
1104 Words | 5 Pages

Outstanding Security Service, contain a appropriate game plan of safety essential sorts (e.g.: security necessities related to endorsement) and which can have a pair of events, as shown by the quantity of use in perspective of the WS safety efforts (which supports a particular Abstract Security Service Instance) that will be observed in the stage Security Standards Identification. Conceptual Security Service further consolidates Security Policy this fuses the likely parameters or attributes with which we can explain the security systems of potential events of the Abstract Security Service and furthermore a depiction of the game plan of security essential sorts that the Abstract Security Service handles. In the security reference outline furthermore Business Service Security Policy described by each business WS. The business WS security strategy will be enrolled in the Kernel when the industry WS wishes to use the security companies given by that Kernel. Thus, the Kernel will perceive what security companies are asked for by certain WS, and how to use them.

Read More
229 Words | 1 Pages

Security continues to be a top priority at Ripley 's. New technologies and methods to protect our data and system is continually being reviewed. Payment Card Industry (PCI) security standards has a defined breach protocol that must be adhered to if an incident occurs. The breach protocol timeline is very aggressive with little or no time to research and negotiate with security auditing companies. Ripley’s is working to establish an ongoing relationship with a security provider that would be ready to go if needed.

Read More
473 Words | 2 Pages

At Preschool our policies and procedures are stored in our filing cabinet, which i am able to view at anytime. It is important that i am aware of our policies and procedures and that i follow them at all times. Health & safety, I must record any accidents in our accident book, and myself or the manger would get the Parent/carer to check what we have recorded, and sign to say that they have been made aware of the Incident I do regular checks of the inside and outside area to make sure that all equipment is safe for use and in good working order for the children to use without risk of harm We have a safeguarding folder and it is my responsibility to know what the practises are towards safeguarding, if there are any updates, we are always given copies of these to read through, and the changes are discussed at our staff meetings

Read More
913 Words | 4 Pages

For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

Read More
722 Words | 3 Pages

Both our Standards of Conduct and our Policy, Information Security (IS) define and reinforce this obligation. Remember that it is a condition of employment that we observe these standards and policies. Our management also stated the importance of balancing security against the quality and timeliness of patient care, which is fundamental to the operations of a hospital environment. We have worked with other hospitals in performing HIPAA privacy and security assessments and relatedremediation efforts. We understand the importance of applying practical security solutions to reduce breach risks and to address compliance requirements, while not overburdening the businessoperations of the hospital facilities or impairing patient care.

Read More
844 Words | 4 Pages

Nowadays, the technology is the primary focus of all people, it may move far too quickly into the exposure of personal information. Moreover, the technological advances have been vital; there are some principles used worldwide for the information security and privacy risk mitigation. The people are initiating to store data through online; with this kind of matter, the associations who hold the information regarding the personal and other important information are the endeavor to protect these kinds of data. Though, as a result of the improvement of technology; the computer fraud, virus or identity thefts are very vivacious in terms of stealing some information of other people. Moreover, every day that people browse the internet, log on, as well as posting into the social media; it is the way of giving intentionally or unintentionally the personal information.

Read More
184 Words | 1 Pages

Policies and procedures were formed to help influence as well as determine any and all major decisions and actions and to ensure all activities take place within the set boundaries. Your organisation has policies and procedures are set in place so you have a form of guide lines to go by at work. These policies and procedures will contain information on things such as: - Manage personal work priorities: Manage work priorities would then contain information on strategies on how to time manage your work and prioritize jobs that you need to do. This can be in the form of a graph or chart.

Read More
2273 Words | 10 Pages

_ There should be a detailed reports on the available vulnerabilities, including the manner how they can be exploited and fixed. _ Updates and support available when needed. _ High-level reports that can be presented to managers. These features may save your time and efforts. 3.

Read More

More about IT Infrastructure Audit Case Study

Related Topics

Open Document