Audit and Assurance

Expand all | Collapse all

How is your IT Audit being changed from Covaid 19?

  • 1.  How is your IT Audit being changed from Covaid 19?

    Posted 19 Mar, 2020 11:25
    Greetings Everyone,


    How is your role as Auditors being changed by Covaid 19/Coronavirus?

    What changes are your organizations and yourselves implementing to continue auditing?


    Please share some key Risks being auditied right now?

    ------------------------------
    Sal Rodriguez
    Director of Internal Audit
    CISA, CIA, CRMA, CCSA, CGAP, CICA, MBA, MS
    ------------------------------


  • 2.  RE: How is your IT Audit being changed from Covaid 19?

    Posted 23 Mar, 2020 15:49
    Some possible topics include:

    Continuity Planning, Information Security, IT infrastructure for remote work,  Digital Ecosystem readiness

    ------------------------------
    Sal Rodriguez
    Director of Internal Audit
    CISA, CIA, CRMA, CCSA, CGAP, CICA, MBA, MS
    ------------------------------



  • 3.  RE: How is your IT Audit being changed from Covaid 19?

    Posted 24 Mar, 2020 08:53
    Salvador,
     This is a great question. Covid-19 has indeed transformed the entire landscape.
    Firstly I am working with the CAE at our organization to evaluate the viability of completing the IT Audits for 2020 and understanding the impact of any holdovers across our 2 year audit rotation cycle.
    Secondly - having recently (october 2019) a BCP audit and provided management with a list of areas that need to be addressed, my IA team members are sitting with management as we go through this pandemic and assist in updating the process. Management has accepted the fact that IA will NOT be in a position to evaluate the BCP process as we are assisting management and that this audit will be outsourced. Until we have completed our cool off period.
    Finally - We are also keeping a close eye on accounts being created on our VPN concentrator and conforming these are for staff deemed critical per the BCP process. All accounts for non critical staff are being provisioned on a case by case basis.

    With the Technology department working as long as they have we have also recommended to executive leadership to re-evaluate staffing plans going forth.

    Hope this helps.

    Masood

    ------------------------------
    Ahmed Zafar
    VP Snr Manager IT Audit
    ------------------------------