CSIA 413 UMGCIT Security Audit Policy & Plans Project Paper
CSIA 413 UMGCIT Security Audit Policy & Plans Project Paper
Project #three: IT Audit Policy and Plans
Firm Background & Working Surroundings
Pink Clay Renovations is an internationally acknowledged, awarding profitable agency that focuses on the renovation and rehabilitation of residential buildings and dwellings. The corporate makes a speciality of updating properties utilizing “good dwelling” and “Web of Issues” applied sciences whereas sustaining interval appropriate architectural traits. Please confer with the corporate profile (for added background data and details about the corporate’s working setting.
Policy Concern & Plan of Motion
The company board was lately briefed by the Chief Info Officer in regards to the firm’s IT Security Program and the way this program contributes to the corporate’s danger administration technique. In the course of the briefing, the CIO introduced Assessment studies and audit findings from IT safety audits. These audits targeted upon the technical infrastructure and the effectiveness and effectivity of the corporate’s implementation of safety controls. In the course of the dialogue interval, members of the company board requested about audits of coverage compliance and assessments as to the diploma that staff have been (a) conscious of IT safety insurance policies and (b) complying with these insurance policies. The Chief Info Officer was tasked with offering the next objects to the board earlier than its subsequent quarterly assembly:
Concern Particular Policy requiring an annual compliance audit for IT safety insurance policies as documented within the firm’s Policy System
Audit Plan for assessing worker consciousness of and compliance with IT safety insurance policies
Are staff conscious of the IT safety insurance policies within the Worker Handbook?
Do staff know their tasks beneath these insurance policies?
Audit Plan for assessing the IT safety coverage system
Do required insurance policies exist?
Have they been up to date inside the previous 12 months?
Are the insurance policies being reviewed and accepted by the suitable oversight authorities (managers, IT governance board, and many others.)?
