Re: Audit for documented procedures for the operation of an IS department

Dear Artiman,

Try the next site https://audit.byu.edu/website/tools/COBIT/PDFS/Framewrk.pdf

for the COBIT controls. This the best framework you can use for implementation 
and auditting.
Our company (20 biljoen Euro p.j.revenue company) used this framework for the 
SOX legislation.

Best regards,

Roy Vijay
Security and Contingency specialist



----- Original Message -----
From: artiman1973@yahoo.com
To: security-management@securityfocus.com
Subject: Audit for documented procedures for the operation of an IS department
Date: 30 Jun 2005 20:41:58 -0000

> I'm working on an audit plan regarding the operation documentation 
> of a godd size Information Systems department focused on the 
> following topics:
> - Handling ofdata files
> - Job scheduling requirements
> - Error and outage handling
> - Systems Support Contract(s)
> - System Recovery
> - Housekeeping
> - Maintenance
> - Configuration and Settings
> - Data retention
> Can somebody point me out to good links, documentation.. any 
> advises for a documentation audit ?
> I've checked the ISO17799 and CISA documentation, I feel that the 
> plan stills needs a lot of work.
>
> Thanks in advance,
>
> Artiman


-- 
_______________________________________________
NEW! Lycos Dating Search. The only place to search multiple dating sites at 
once.
http://datingsearch.lycos.com