Auditor Detailed View

Auditing: AK k

1.2 Whether the scope and objectives of a BCP are clearly defined in the policy document? (Scope to cover all critical activities of business. Objectives should clearly spell out outcomes of the BCP)

Policy and Procedure

Medium

Testing Nodes for test porpose

COMPLIED

1.5 Are the policy and procedure documents approved by the Top Management? (Verify sign off on policy and procedure documents and budget allocations made by the management for a BCP)

Policy and Procedure

Medium

Testing Nodes for test porpose

NOT AVAILABLE

1.6 Does the business continuity plan ensure the resumption of IS operations during major information system failures? (Verify that the IS disaster recovery plan is in line with strategies, goals and objectives of corporate business continuity plan).

Policy and Procedure

Medium

Testing Nodes for test porpose

NOT AVAILABLE

2.1 Has the management identified potential threats/vulnerabilities to business operations? (Verify the business environment study report. Risk Assessment Report?)

Risk Assessment

Medium

Testing Nodes for test porpose

NOT AVAILABLE

2.2 Are the risks evaluated by the Management? (Verify the probability or occurrence of the threat / vulnerability review carried out by the management).

Auditing: AK k

1.2

Whether the scope and objectives of a BCP are clearly defined in the policy document? (Scope to cover all critical activities of business. Objectives should clearly spell out outcomes of the BCP)

Policy and Procedure

Medium

Testing Nodes for test porpose

COMPLIED

1.5

Are the policy and procedure documents approved by the Top Management? (Verify sign off on policy and procedure documents and budget allocations made by the management for a BCP)

Policy and Procedure

Medium

Testing Nodes for test porpose

NOT AVAILABLE

1.6

Does the business continuity plan ensure the resumption of IS operations during major information system failures? (Verify that the IS disaster recovery plan is in line with strategies, goals and objectives of corporate business continuity plan).

Policy and Procedure

Medium

Testing Nodes for test porpose

NOT AVAILABLE

2.1

Has the management identified potential threats/vulnerabilities to business operations? (Verify the business environment study report. Risk Assessment Report?)

Risk Assessment

Medium

Testing Nodes for test porpose

NOT AVAILABLE

2.2

Are the risks evaluated by the Management? (Verify the probability or occurrence of the threat / vulnerability review carried out by the management).

Risk Assessment

Medium

Testing Nodes for test porpose

Hold

2.3

Has the organisation selected the appropriate method for risk evaluation?

Risk Assessment

Medium

Testing Nodes for test porpose

NOT AVAILABLE