While installing and configuring some new software on my Windows server, I noticed that the IT department forgot to remove some previous software components from my server.
I remember seeing the notice that the software was being uninstalled and replaced by another package.
I could have removed the left over components myself (I am admin on the server), but I wanted to see if they would ever be removed. Did the Windows server team forget about this, or did the team not concern itself with such things? Maybe the procedures don’t include a process to ensure all components are removed.
I waited about 2 months, but the components were not removed.
Continue reading →
Filed under Audit, Case Files, Security, Security Scout, Technology
Tagged as admin, application, controls, enterprise, impact, IT controls, left behind, poke the bear, scheduled task, Security, server, uninstall, vulnerability, what's the risk, Windows
In the previous post, Create a Team for Audit Analytics? Part 2, I explored the pros and cons of expecting all auditors to develop a level of data and analytic proficiency.
These auditors would continue to do audit testing that involves analytics as well as testing that does not involve analytics. In addition to keeping up their business skills, they would be learning and upgrading their data analytic skills.
In the first post of this series, I reviewed some of the pluses and minuses of creating a dedicated analytics team.
However, a third option exists, which is sort of a hybrid between having dedicated analytic auditors doing all the analytic work and requiring everyone to increase and develop their data and analytic skills.
Let’s explore the hybrid method in this post, and wrap up the series with a few final thoughts.
This is the third post of a 3-part series…
Continue reading →
Filed under Audit, Data Analytics, How to..., Technology, Written by Skyyler
Tagged as agile, analytics, Audit, cons, dedicated, department, everyone, flexible, growth, hybrid, increase, left behind, management, proficiency, pros, skills, team, virtual