Check out these categories to find posts that you’re interested in.
- ACL
- Audit
- Blogging
- CISA
Case Files - Employment
- Free
- Free Download
- How to…
- Humor/Irony
- Scripting (ACL)
- Security
- Security Scope
- Security Scout
- Quote of the Weak
- Top 10
- Uncategorized
Popular Posts
Top 100 Network Security Tools
Top 10 Pay-Boosting Tech Certifications
How to Pass Certification Exams
Top 7 Reasons for Security Certification
What Needs to be on a GOOJ Card?
Top 10 Ways to be a Lovable Auditor
Also check out my interviewing IT auditors series.
Some of My Favorites
I love humor and real-life experiences…
System Down + Humor – Calls = … How to use humor to tackle IT issues with grace and laughter.
High Cost of 401K Accounts … A real-life situation that had an interesting financial impact.
Phony Charges (this time, it’s personal) … I take on the phone company to save a few bucks.
Major Bank Invites Hackers In? … I paid a bank a visit and found fun in the basement.
Good day, I am back with question. I work as junior IT auditor (Internal). Today morning, my boss came to me and said that our company is going to outsource the BPO (call center operations) and management wants to understand the risk involved.
I know I have to do risk assessment but how to start with what should I do?
What resources I need to perform RA?
Answer would be of great help. Also, please let me know the right place to ask question if it’s brand new that does not fit in any of the post.
LikeLike
Dinesh,
Look at IIA and ISACA for risk assessment methodology and Auditnet.org to see if they have any test plans for outsourcing or call center operations. You might be able to find something for free on the first two sites, but usually the best stuff requires membership. If you have an ACL support agreement, you can access Auditnet free (search my blog for Auditnet to see the post about that).
As for where to ask new questions, I’ll add a post about that on Monday. Thanks for the idea.
LikeLike
Pingback: Ask a Question | ITauditSecurity