6. Auditing IT infrastructure and operations Flashcards
Auditing IT infrastructures and operations includes
- Auditing Information systems hardware
- Auditing Operating Systems.
- Auditing File systems
- Auditing Database Management systems
- Auditing Network infrastructure
- Auditing Network Operating Controls
- Auditing IT operations
- Auditing computer operations
- Auditing file management
- Auditing data entry
- Auditing Lights - out Operations
- Auditing problem Management Operations
- Auditing Monitoring operations
- Auditing Procurement
- Auditing Disaster Recovery Planning
- Auditing Disaster Recovery Plans
Auditing Information systems hardware includes :
- Standard
- Maintenance
- Capacity
- Change management -
- Configuration management
Examine STANDARDS of Information systems hardware
Auditor should examine hardware procurement standards that specify the types of systems that the organization uses. Examine a sample of recent purchase to see whether standards are being followed. The scope of this activity should include servers, workstations, network devices, and other hardware used by IT.
Examine MAINTENANCE of Information systems hardware
Examine maintenance requirements and record to see whether any required maintenance is being performed. If service contracts are used, these should be examined to ensure that all critical systems are covered.
Examine CAPACITY of Information systems hardware
Examine Capacity management and planning processes, procedures, and records. This will help understand whether the organization monitors its systems’ capacity and does any planning for future expansion
Examine CONFIGURATION MANAGEMENT of Information systems hardware
The auditor should examine configuration management record to see whether the IT organization is tracking the configuration of its systems in a central