6.7: Auditing Problem management operations and Monitoring Operation Flashcards
What are included in the audit of problem management operations
- Problem management policy and process
- Problem management records
- Problem management timelines
- Problem management records
- Problem resolution
- Problem recurrence.
Examining PROBLEM MANAGEMENT POLICY AND PROCESSES
Examine policy and procedure documents that describe how problem management is supposed to be performed
Examining PROBLEM MANAGEMENT RECORDS
A sampling of problems and incidents should be examined to see whether problems are being properly managed.
Examining PROBLEM MANAGEMENT TIMELINES
Time spent on each problem should be examined to see whether resolution falls within the SLA
Examining PROBLEM MANAGEMENT REPORTS
To ensure that management is aware of all problems
Examining PROBLEM RESOLUTION
Examine a sample of problems to see which ones required changes in other processes. The other process documents should be examined to see if they were changed
Examining PROBLEM RECURRENCE
Examine problem record to make sure that the same problems are not coming up over and over again.
Auditing monitoring operation includes
- Monitoring Plan
- Problem log
- Preventive maintenance
- Management review and action
Examining Monitoring plan when auditing monitoring operations.
Review any monitoring plan documents that describe the organization’s monitoring program, tools, and processes.
Examining problem log when auditing monitoring operations.
Review monitoring problem log to see what kinds of problems are being recorded.. See if all devices and systems are represented in problem logs.
Examine Preventive maintenance when auditing monitoring operations.
Examine monitoring results, monitoring plan, and preventive maintenance records, and determine whether the level of preventive maintenance is adequate and effective.
Examine management review and action when auditing monitoring operations
Examine monitoring report meeting minutes, and decision logs to see whether management is reviewing monitoring report and whether management actions are being carried out.
Auditing procurement includes
Requirement definition and feasibility studies
Examine requirement definition when auditing procurement
Examine procurement policies, procedures, and records from selected procurement projects.
Examine feasibility studies when auditing procurement
Examine selected feasibility study documents as well as policy and procedures documents for performing feasibility,