I think your proposal was very well done in regard to risk. You addressed concerns from a risk perspective, and your table in the appendix listed the risks associated with each control. I liked that because I was able to quickly and clearly see the importance of auditing the policy and the areas of the policy that are vulnerable to risk and why. Your audit proposal was also aesthetically well done which adds to the professionalism of the proposal.
I think the audit timetable is good. It shows what auditor do in different period and it is clear to see and follow. I also think that appendix are good, which show many different risk for one control. It is easy for us to check what will happen and what we should do for this kind of risk.
I really like the format of your audit plan. It looks like a real-world document! The risk that you identified is impressive. This is a Media Drive Usage Policy for A3N, but I think most of the document talks too much about the risk that related to using media drive. If you can add more controls and analysis, I think the plan will be better.
Sean Patrick Walsh says
I think your proposal was very well done in regard to risk. You addressed concerns from a risk perspective, and your table in the appendix listed the risks associated with each control. I liked that because I was able to quickly and clearly see the importance of auditing the policy and the areas of the policy that are vulnerable to risk and why. Your audit proposal was also aesthetically well done which adds to the professionalism of the proposal.
Xiaodi Ji says
I think the audit timetable is good. It shows what auditor do in different period and it is clear to see and follow. I also think that appendix are good, which show many different risk for one control. It is easy for us to check what will happen and what we should do for this kind of risk.
Mengxue Ni says
I really like the format of your audit plan. It looks like a real-world document! The risk that you identified is impressive. This is a Media Drive Usage Policy for A3N, but I think most of the document talks too much about the risk that related to using media drive. If you can add more controls and analysis, I think the plan will be better.