jase555

OK,

been told the internal Hit Squad Auditors Are Coming In to Audit. Our usual PWC mob don't touch me usually (IT Based)

Anybody Know what they will hit me for

topics eg

Purchasing of IT Equipment
DR
Software Audit

thanks in advance

jase

AlexM

They will be interested in control processes and security

Change, configuration, and release management
Security policies and auditing
Service Level management and reporting
Major Incident management processes inc. DR

Scooby Doh!

i guess they may also be looking at non business use of the internet during working hours. What about non business use of the office totty during office hours??

beemerboy

do what i do, book some time off!!!! heheheh

BB

clarence

Are u talking abt internal auditors or external auditors?
In the case of external auditors, they'll be interested in ur IT security systems, so that they can assess the level of control risk u have (& also to enable them to work on their Tests of Controls). It'll also allow the external auditors to see the level of risk of fraud due to ineffective/insufficient system of controls. The external auditors may also ask ur department to give details of transaction flows of different company operating procedures. Lastly, if they found the increase in expenses from ur department is musch more than the others, they may well question u u on the reasons as to why this has occured.
If u're talking abt internal auditors, then just pray they wouldn't pick on what naughty things u've done before in office. Those guys are responsible for looking at whether company's operational rules & regs are conformed by each dept, & whether guidelines are followed. If not, then it'll all be reported. This is called a Compliance Audit. If I were u, I would prefer the external auditors. They should be much more friendlier & less scary.