ITACS 5205

Temple University

Team Assignment #2

Assignment Two

10/03/2017

Internal Audit Senior Managers are asking you to develop a Risk and Control Matrix for the IT audit entity you plan to audit and incorporate the RCM into the Audit Planning Memo your team worked on.

The risk and control matrix should identify and key risks associated with the operating systems you are going to audit and should be created in a table format (Ref. to  RCM Template) and should contain the following components:

  1. Risk Events (C.I.A) & Risk Description Detail – Answer the “so what” question
  2. Inherent Risk Rating Rationale (Likelihood, Impact)
  3. Inherent Risk Rating (H/M/L)
  4. Expected Controls (What should be in place to mitigate the risk identified)
  5. Control Assessment (evaluating of the design of the controls – Hypothetical)

 

Sample IT Risk Definition:

    1. IT Governance
    2. System Development
    3. System Documentation
    4. Library Management and Change Control
    5. Information Security
    6. Desktop and Servers
    7. Infrastructure Disaster Recovery
    8. Data Center Operation Services
    9. Data Center Physical Security
    10. Data Transmission
    11. Data Integrity
    12. End User Computing
    13. Telecommunication
    14. Vendor Resilience

Due Date: EOD 10/17/2017

Sample RAM Template:

risk-assessment-matrix-template

 

Email to: Liang.yao@temple.edu Please call me or email me should you have any questions regarding the completion of this assignment BEFORE the due date.