PQR Ltd. is an electronic goods manufacturing company having very wide customer base for past many years. The company has implemented a comprehensive management information system (MIS) for its business requirements. The
CS Professional · Information Technology and Systems Audit · PYQS · June 2018
PQR Ltd. is an electronic goods manufacturing company having very wide customer base for past many years. The company has implemented a comprehensive management information system (MIS) for its business requirements. They have also developed their own private network (i.e. Intranet) to enable employees to share information amongst them. All strategic steps have been taken to encourage the employees to take maximum benefits of Intranet. The management of the company has always been prompt in accommodating latest technological developments in the industry suiting to its business. They have been using a highly organized computer based MIS to aid their managerial functions of planning and control. The company has also selected an Enterprises Resource Planning (ERP) system after a lot of deliberations on its essential qualities required. Further, the management of the company is very responsive to any suggestions of the report of system audit conducted from time to time. A specific attention is given to audit of environment controls for the safety of equipments and their spare parts, which are core to its running business. Based on the above, answer the following: What are the environmental factors that need to be checked and commented upon by the auditor?
Answer & Explanation:
The following environmental factors need to be checked and commented upon by the auditor: Online UPS not used; either line-interactive UPS or Offline UPS used, or CVT used. Electrical cabling loose / points having loose contact. No separate earth pit for the Computing equipment. Switches/Hubs/Routers not fed with UPS power. Server room door kept open. AC not functioning properly, especially in summer. Positioning of AC and Servers in the Server room. No pest control measures taken. Eatables taken into server room/ Smoking in the server room. Heavy duty printer kept inside server room: scope for dust. UPS, AC, other electrical equipment not under regular AMC. No power backup in case City power supply fails for long hours. No smoke detectors/fire alarms in server room area. Fire extinguishers not kept filled and ready. No fire drill carried out to make people aware of dos and don'ts. The above are serious lapses that can seriously affect the functioning of the IT Setup and cause work stoppages.
Topics: Systems Audit
Related Questions in this Topic
- Write short notes on the following: Significance of System Audit
- Classify different controls which are verified by an IS Auditor in a computerised environment.
- Highlight the significance of system audit.
- Differentiate the following: 'System audit' and 'system evaluation'.
- What are the common types of systems documentation used by information systems (IS) auditors? State the minimum contents...