Audit Plan for Johnson & Associates, LLC
Above is our audit plan video. Here is our written audit plan for our remote access policy.
Best,
Christopher Brewer, Mauchel Barthelemy, Nicholas Gikonyo & Victoria A. Johnson
We Audit Tech (WAT)’s Audit Proposal for JTT
Below is We Audit Tech (WAT)’s proposal for auditing Just the Tech (JTT)’s Acceptable Use Policy.
Team Members: Zachary Cehelsky-DeAngelo, Kerwing Hy, Ian Johnson, Steven Tang, and David Wynne
JTT and WAT Partnership Proposal
Video below:
Audit Plan for Information Security Response Policy
Parallax Consulting is submitting a plan to audit the University of JMTSJ’s Information Security Response Policy. Our group members include:
- Shain Amzovski
- Mushima Ngalande
- Tamer Tayea
- Jon Whitehurst
- Josh Zenker
Here is the video presentation to pitch our plan to the Board of Trustees at the University:
Also see the accompanying audit plan document (PDF).
Audit plan for ABC company’s Social Security Number Policy.
Download link (right click and save as) :Video
Yizhou An
Jiehong Huang
Blake Koen
Anh Tran
Shizhong Yang
Web Application Security Policy—Audit Plan
Audit Video: Web Application Security Policy—Audit Program
Audit Plan: Web Application Security Policy audit plan
Group members:
Shuya Yang
Shiting Liu
Mengyuan Wang
Yue Zhang
Yi Wang
Initech Acceptable Use Policy – Audit Plan
Initech Acceptable Use Audit Plan – Initech Acceptable Use Audit Plan
Initech Acceptable Use Document Request List – Initech Acceptable Use – Document Request List
Prepared by:
Jason Lindsley
Ruslan Yakush
Devang Mehta
Ravi Sharma
Shuvam Dasgupta
End of the Year Social Event
The ITACS gang 🙂
Semester Wrap Up
A couple of things left to do for the semester:
- I will drop your lowest quiz grade and use your revised average.
- I will have your audit programs graded by Friday, 12/4
- I will post all of your grades, up to the final, on Friday 12/4
- Your Final exam will be available on Blackboard on Saturday morning at 6:00 AM and is due by 11:59 PM on Sunday. You will have one try at the exam and must answer 75 questions in 90 minutes. Set aside a quiet time to make sure you give yourself every advantage. If you run into any system problems you must call me immediately at 910 880 1254 so that we can work them out. Best of luck on the exam.
Finally, I want to thank all of you for your hard work and interest in the topic. I have been telling everyone in the department just how incredible your discussions have been. You have brought a level of nuance and practicality that we rarely achieve in classroom discussions. Well done!
Rich
Week 14: Maturity Models
Maturity models are a way to assess how well an organization is doing in a particular area. In this field, there are many different maturity models but two (COBIT 5 and ITIL) that you are sure to run into. COBIT 5 is all about the control processes as you now know and ITIL is about how to run IT services. Each will give you an idea about how to assess an organization’s relative strength in an area.
The basic idea, using COBIT 5 as an example, is that there are different levels of maturity for each process. The lowest level, 0, indicates that the process doesn’t exist in a complete form. Level 1 indicates that the process exists and produces results, but is completely informal. In Level 2, the informal process is managed (ie planned, monitored and adjusted) but still not formally defined. Level 3 is when they formal process emerges and it is generally followed. A level 4 process becomes predictable (remember your TQL terminology) and operates within defined limits. Finally, Level 5 is where the process is well defined, controlled, and is continuously improved to meet current challenges.
No organization has enough time and resources to take any maturity model and implement it fully. Trying to do so would be a poor allocation of IT resources. What most companies do is to pick one or two areas upon which to focus each year. They do an assessment of these areas and them implement whatever improvements are needed. In this way they continuously improved the organization’s performance without breaking the bank.
Recent Comments