Hi,
Our company is currently seeking and outsourcing option for our IT audit mission. In order to select the best candidate for this role, I would like to welcome the bid around the world.
In your reply (bid), please identify the issue, the risk and the recommended approach to be taken for the following two scenarios. We would like to lower the company's risk posture (by doing this audit might be improving company's risk posture or to bring a distraction to the IT and Business / Security system). How do you manage the below two common scenarios as it is usually seen between auditors and auditees. How do you minimize the impact of the company.
Make sure you Identify the " issue, the risk and the recommended approach " to be taken.
Scenario 1: Cloud vs. On Premises Workloads Audit requirement: Security & Privacy protection and controls
¦ Risk factors: Misuse of sensitive data, legal liability and/or reputation damage, and noncompliance with regulatory requirements.
¦ Challenges:
? Industry Trends;
? Cost;
? Perception vs. Reality; and
? Corporate Change Management.
¦ Recommended approach: (Please provide)
Scenario 2: Standardize Mission-Critical Controls Audit requirement: During a mandated regulatory review, the auditor finds that the IT organization has not fully implemented procedures to enforce standardized system development and change management controls for its mission-critical systems (throughout the life cycle — development, testing, preproduction and production).
¦ Risk factors: If change tracking and change control processes are not implemented and enforced throughout the system development life cycle, changes could be made that inadvertently create a risk of exposure, allowing access to business-critical data or customer data.
¦ Challenges: The auditor's request may seem unreasonable because, for some organizations, changes to applications can occur monthly and for others, weekly, daily or even hourly. The types of changes can vary from simple to complex functional changes that affect multiple systems. Tracking this level of detail without a mature process and automation can be resource- and time-consuming, and can adversely affect performance.
¦ Recommended approach: (Please provide)
The best reply will be selected as the candidate.
Thanks
Anna
Greetings,
I am BS-CS graduate having majors in Software Engineering. I have knowledge of IT and its application thus can write excellent report fulfilling the requirements of this report. All work will be done on time by submitting updates periodically and be plagiarism free as all work will be referenced authentically as aware of all referencing styles.
Hoping to hear soon from you to discuss more details.
i am CISA certified (OCT 2016) Systems Auditor with over 15 years ERP-SCM software solutions project Management experience Worked EXTENSIVELLY ON ERP IMPLEMENTATIONS ERP SECURITY AUDIT FOR BOTH CLOUD AND ON PREMISE SOLUTIONS
HANDS ON EXPERIENCE OF OVER 15 YEARS IN ERP-SAP-R/3 implementations as PROJECT MANAGER
I am a seasoned IT Security Auditor with CISA CISM CISSP ITIL SABSA GICSP Certifications. Have done many audits in last 15 years of my career for all industry verticals
Relevant Skills and Experience
CISA CISM CISSP ITIL SABSA GICSP
Proposed Milestones
$555 USD - Audit, Interviews, Report Generation
Additional Services Offered
$1 USD - Security Desgin
$1 USD - Security Architecture
$1 USD - Security Testing
$1 USD - Security Engineerting
10 years of IT Audit and IT Risk Assurance experience with Big-4 firm and covered various clients of Telecom, Banking, Oil&Gas and many others.
Rich IT Audit methodology concepts & standards.
Relevant Skills and Experience
IT Audit / IS Audit
IT Risk Assessment
CISA, COBIT, ITIL certified
Project Management and report writing skills
Computer Engineer by profession
Working experience on ISO27001, ISO22301, NIST & HIPPA
Proposed Milestones
$100 USD - On Agreement
$233 USD - On Final Report Delievery
Do you need remote assistance or would you need on field assistance too?