Week 14: Regulations, Standards, and Maturity Models

CDQA Inc Audit Proposal

 

AccueXchange_Background

AccueXchange_Audit_Strategy

LockTSS_Audit_Plan_Final

 

 

Reading Questions:

1. What is the difference between a regulation, a standard, and a maturity model?
2. Under what conditions might each of these be important to a company?
3. Why might a company not try to meet all of these in its operation?

The activity for this week is to finish your audit plan project with your team.

The Audit Proposal Projects are due on Monday, December 11.  The Fall Break is a great time for team’s to complete the project, or at least to get a good start.  You will have to submit your team’s Audit Program Proposals (both document and video) as posts and assign a category of week 14.

To help you get started here is a link to a previously submitted audit plan for an acceptable use policy.  Again the format is relatively unimportant but the coverage of key concepts like a policies goals, the controls that exist, how you can collect evidence of sufficiency and effectiveness, etc. are. http://community.mis.temple.edu/mis5202online2016/files/2016/07/JTT-and-WAT-Partnership-Proposal-2-2.pdf