IT Operations Management Audit Work Program

This sample audit work program outlines steps to audit an organization’s security management process.

Risk indicators include: no long-range plan to schedule and coordinate hardware/software upgrades in support of the overall IT and business plan; no capacity planning to identify, assess and address storage capacity constraints; production batch processing schedules are frequently late or incomplete; no formal procedures or automated tools to develop, maintain and execute production batch processing schedules; and frequent and costly service interruptions due to equipment failures or job re-runs due to missed deadlines.