Uncategorized

You are a Senior IT auditor having a planning meeting with your two Staff members. The task at hand is an ACL data analysis project for the client. List and describe the steps you and your team should follow in order to deliver a successful project. Differentiate between “auditing around the computer” and “auditing through […]

How does COBIT define governance? In regards to delivering IT value, why is it so important for the business and its IT department to join efforts? Describe the three widely recognized best practice IT-related frameworks, and state when each framework should be used. Discuss why should organizations consider implementing a joint framework between ITIL, COBIT,

Explain what an IT balanced scorecard is. The chapter mentioned three ways that IT can deliver value to the organization, through: a. Implementing successful projects and keeping operations running b. Automating business processes c. Being available for the organization as needed Explain in your own words how these three actually provide value to organizations. Provide

What is a strategy? What is an IT strategic plan and why is it significant in aligning business objectives with IT? What is an IT Steering Committee? Summarize the various activities included as part of its scope. What is a Technical Steering Committee and what does it assess related to a technology solution?

Operationalization translates the understanding of both, organization and IT objectives, into operating plans. Operating plans identify and schedule the IT projects that will be initiated and the IT service levels that will be expected. Delivery of these operating plans should be controlled by a series of governance processes. List and describe these processes.

Why is a help desk function critical to system development? Discuss its interrelationship with the problem management and reporting system. Why is it necessary for programmers to have good documentation as part of the operations and maintenance phase of the SDLC? Discuss how the IT auditor can benefit an organization’s system development and implementation process.

Differentiate between the two roles IT auditors can take on in a SD&I project. What methodology or technique is used to bring users and project team members together to create a detail design? Throughout the system development and implementation project, the IT auditor will make control recommendations to management resulting from identified findings. Explain why

As the internal IT auditor, you recommend that planning for the new system development should be consistent with the SDLC framework. IT personnel have identified the following as major activities to be completed within the upcoming system development. – Ensure Help desk is in place to provide support – Integration of security access controls within

Summarize the common phases in the traditional system development life cycle (SDLC) approach. Differentiate between the various system test events. Describe what aspects of the system are covered during each event A company is developing a new system. List advantages and disadvantages for each of the System Development approaches discussed in the chapter.

Prepare a one-page, two-column audit program table listing all risks you can think of that are significant to any organization when implementing the SDLC phases. Next to the risks, list relevant IT controls and procedures that should be in place to mitigate the risks listed. Make sure you document at least one IT control for