Security Basics mailing list archives

Re: IT Audit Template


From: killy <killfactory () gmail com>
Date: Mon, 18 Jun 2007 14:51:08 -0400

Hmm, forgot the links.  :-)


Toolkit for tweaking:

http://www.oit.state.pa.us/eashare/lib/eashare/CISOToolkit_v1.zip

Reference links:

http://www.oit.state.pa.us/eashare/lib/eashare/SecureMethod.doc


Enjoy!

On 6/18/07, killy <killfactory () gmail com> wrote:
Someone might ask, auditing for or against what?
HIPPA
SOX
ISO 17799
NIST
PCI
Internal Policy
 etc,etc.


I have however found an audit template /PPT completely editable.
It is for an ISO 17799 compliance audit.
Try this, look around the site some, you may find other ideas too.

Read through all the referenced links in the documentation as there
are some other great resource listed.

If I am understanding you correctly, then this will get you moving in
the right direction.

Enjoy, auditing is not easy work, no one tools will just automatically
audit everything.

-Kill

On 6/17/07, winsoc <winsoc () googlemail com> wrote:
> Hi List,
>
> I'm looking at building an IT Audit Template, and wanted to ask if anyone
> already has such.
> Like a PPT which highlights the points and then a brief summary at the end.
> Would appreciate some input on this.
> The template would be Universal with the thought of using it for several
> applications.
> Would it be best practice to keep it Industry specific (ie. Banking,
> Manufacturing etc..)
>
> Regards
> winsoc
>
>


--
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke



--
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke


Current thread: