Assignment: Managing an IT Infrastructure Audit
This assignment consists of four (4) sections: an internal IT audit policy, a management plan, a project plan, and a disaster recovery plan. You must submit all four (4) sections as separate files for the completion of this assignment. Label each file name according to the section of the assignment it is written for. Additionally, you may create and /or assume all necessary assumptions needed for the completion of this assignment.Imagine you are an Information Security Manager for a large national retailer. You have been hired to be directly responsible for the planning and oversight of IT audits. At the request of the Board of Directors, the CEO has tasked you with developing a plan for conducting regular audits of the IT infrastructure. The planning and management aspects of IT audit are critical to the overall success of the audit, and as a result, the overall success of the systems implemented within the organization. You must develop a policy for conducting IT audits and develop a project plan for conducting two week IT audits.In addition to the typical networking and Internetworking infrastructure of a medium-sized organization, the organization has the following characteristics:
- They have a main office and 268 stores in the U.S.
- They utilize a cloud computing environment for storage and applications.
- Their IT infrastructure includes Cisco workgroup and core switches, Cisco routers, Cisco firewalls and intrusion prevention systems, and servers running Microsoft Windows Server 2012.
- They have over 1000 desktops and approximately 500 organization-owned laptops in the main headquarters.
- They allow employees to bring their own devices into the organization; however, they are subject to being searched upon entry and exit from the building.
- They enable remote access to corporate information assets for employees and limited access to extranet resources for contractors and other business partners.
- They enable wireless access at the main office and the stores.
- They process an average of 67.2 credit card transactions per hour every day at each location and via their corporate Website.
Section 1: Internal IT Audit PolicyWrite a three to four (3-4) page paper in which you:
1. Develop an Internal IT Audit Policy, which includes at a minimum:
a. Overviewb. Scopec. Goals and objectivesd. Compliance with applicable laws and regulationse. Management oversight and responsibilityf. Areas covered in the IT auditsg. Frequency of the auditsh. Use at least two (2) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Section 2: Management PlanWrite a four to six (4-6) page paper in which you:
2. Explain the management plan for conducting IT audits, including:
a. Risk managementb. System Software and Applicationsc. Wireless Networkingd. Cloud Computinge. Virtualizationf. Cybersecurity and Privacyg. BCP and DRPh. Network Securityi. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Section 3: Project PlanUse Microsoft Project or an Open Source alternative, such as Open Project to:
3. Develop a project plan which includes the applicable tasks for each of the major areas listed below for each element of the IT audit mentioned above; plan for the audit to be a two (2) week audit.
a. Risk managementb. System software and applicationsc. Wireless networkingd. Cloud computinge. Virtualizationf. Cybersecurity and privacyg. Network security
Section 4: Disaster Recovery PlanWrite a five to seven (5-7) page paper in which you:
4. Develop a disaster recovery plan (DRP) for recovering from a major incident or disaster affecting the organization.
a. The organization must have no data loss.b. The organization must have immediate access to organizational data in the event of a disaster.c. The organization must have critical systems operational within 48 hours.d. Include within the DRP the audit activities needed to ensure that the organization has an effective DRP and will be able to meet the requirements stated above.e. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
- Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
- Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
- Describe the Sarbanes-Oxley (SOX) act and Committee of Sponsoring Organizations (COSO) framework.
- Describe the process of performing effective information technology audits and general controls.
- Describe the various general controls and audit approaches for software and architecture to include operating systems, telecommunication networks, cloud computing, service-oriented architecture and virtualization.
- Explain the role of cybersecurity privacy controls in the review of system processes.
- Discuss and develop strategies that detect and prevent fraudulent business practices.
- Describe and create an information technology disaster recovery plan.
- Develop an audit plan and control framework that addresses and solves a proposed business problem.
- Use technology and information resources to research issues in information technology audit and control.
- Write clearly and concisely about topics related to information technology audit and control using proper writing mechanics and technical style conventions.
Our Service Charter
-
Excellent Quality / 100% Plagiarism-Free
We employ a number of measures to ensure top quality essays. The papers go through a system of quality control prior to delivery. We run plagiarism checks on each paper to ensure that they will be 100% plagiarism-free. So, only clean copies hit customers’ emails. We also never resell the papers completed by our writers. So, once it is checked using a plagiarism checker, the paper will be unique. Speaking of the academic writing standards, we will stick to the assignment brief given by the customer and assign the perfect writer. By saying “the perfect writer” we mean the one having an academic degree in the customer’s study field and positive feedback from other customers. -
Free Revisions
We keep the quality bar of all papers high. But in case you need some extra brilliance to the paper, here’s what to do. First of all, you can choose a top writer. It means that we will assign an expert with a degree in your subject. And secondly, you can rely on our editing services. Our editors will revise your papers, checking whether or not they comply with high standards of academic writing. In addition, editing entails adjusting content if it’s off the topic, adding more sources, refining the language style, and making sure the referencing style is followed. -
Confidentiality / 100% No Disclosure
We make sure that clients’ personal data remains confidential and is not exploited for any purposes beyond those related to our services. We only ask you to provide us with the information that is required to produce the paper according to your writing needs. Please note that the payment info is protected as well. Feel free to refer to the support team for more information about our payment methods. The fact that you used our service is kept secret due to the advanced security standards. So, you can be sure that no one will find out that you got a paper from our writing service. -
Money Back Guarantee
If the writer doesn’t address all the questions on your assignment brief or the delivered paper appears to be off the topic, you can ask for a refund. Or, if it is applicable, you can opt in for free revision within 14-30 days, depending on your paper’s length. The revision or refund request should be sent within 14 days after delivery. The customer gets 100% money-back in case they haven't downloaded the paper. All approved refunds will be returned to the customer’s credit card or Bonus Balance in a form of store credit. Take a note that we will send an extra compensation if the customers goes with a store credit. -
24/7 Customer Support
We have a support team working 24/7 ready to give your issue concerning the order their immediate attention. If you have any questions about the ordering process, communication with the writer, payment options, feel free to join live chat. Be sure to get a fast response. They can also give you the exact price quote, taking into account the timing, desired academic level of the paper, and the number of pages.