6. Auditing IT infrastructure and operations

Question 1

Auditing IT infrastructures and operations includes

Answer 1

• Auditing Information systems hardware
• Auditing Operating Systems.
• Auditing File systems
• Auditing Database Management systems
• Auditing Network infrastructure
• Auditing Network Operating Controls
• Auditing IT operations
• Auditing computer operations
• Auditing file management
• Auditing data entry
• Auditing Lights - out Operations
• Auditing problem Management Operations
• Auditing Monitoring operations
• Auditing Procurement
• Auditing Disaster Recovery Planning
• Auditing Disaster Recovery Plans

Question 2

Auditing Information systems hardware includes :

Answer 2

• Standard
• Maintenance
• Capacity
• Change management -
• Configuration management

Question 3

Examine STANDARDS of Information systems hardware

Answer 3

Auditor should examine hardware procurement standards that specify the types of systems that the organization uses. Examine a sample of recent purchase to see whether standards are being followed. The scope of this activity should include servers, workstations, network devices, and other hardware used by IT.

Question 4

Examine MAINTENANCE of Information systems hardware

Answer 4

Examine maintenance requirements and record to see whether any required maintenance is being performed. If service contracts are used, these should be examined to ensure that all critical systems are covered.

Question 5

Examine CAPACITY of Information systems hardware

Answer 5

Examine Capacity management and planning processes, procedures, and records. This will help understand whether the organization monitors its systems’ capacity and does any planning for future expansion

Question 6

Examine CONFIGURATION MANAGEMENT of Information systems hardware

Answer 6

The auditor should examine configuration management record to see whether the IT organization is tracking the configuration of its systems in a central