Exercise
1. You are an internal auditor assigned to perform an operations audit of a data
center. On reviewing the operations policy and procedures manuals, you find that
the manuals appear to be fairly complete and up to date. Describe three audit tests
you would perform to test whether the manuals are actually used and followed.
2. Describe five required capabilities for effective auditor use of tape management
software.
3. Your organization is considering signing a contract with a company to provide off
site storage. You have been asked to review the contract to see if backup and
recovery needs have been addressed. List five areas that you would look for in the
contract related to backup and recovery needs.
4. What are operational controls ? what purpose do they serve?
5. what are policies, procedures, and standards viewed as examples of operational
controls ?