General Controls Review
The general controls review is analogous to the traditional information technology audit. It addresses all aspects of the internal control and risk management related to IT resources, of which information security is a subset. |
Business issues
- "Employees have system access privileges well beyond their normal job function."
- "Our business has grown significantly, but our internal controls have not matured with the business."
- "Employees routinely add hardware or software to our network without permission."
- "We often find “rogue” wireless access points installed on our trusted network without management permission."
- "Simple power outages result in expensive downtime."
- "Our development staff routinely alter source code in our live environment, often resulting in difficult reconcilement problems."
- "Employees leave our company, but often still have access to our email and file servers."
LarsonAllen's response
Our experts assess your security posture and control environment holistically, including, but not limited to:
- Policies, procedures, and training
- Systems security administration
- Physical security administration (building perimeter and data center)
- Systems development controls
- Data backup and recovery
- Disaster recovery planning
|
Share this with a friend