ICT Internal Audit

[sarchs]

Afternoon all!

 

I have been told by the Finance and Business Manager that we are going to have an ICT Audit from County. I would like to know if anyone has ever had an ICT Audit from Lancashire County (or any other auditors) and what they will be looking for.

We have an asset register of all the equipment we have and when and how it is disposed of.

Disaster Recovery Plan

Backup procedures

ICT AUP for staff and pupils

3x quotations for anything spent over £5k

 

Can anyone think of what else they want to look at?

Thanks

[Edu-IT]

Data Protection / Network Security type stuff?

[computer_expert]

Software licencing details?

[mthomas08]

Had a friendly one from KCC - EIS once a few Year back.

 

It was more like to help the Schools with Backup procedures, security, filtering. All the kind of stuff any NM really should know/have.

[Sylv3r]

I think exactly that. They will be checking the documentation you have is up-to-date, ensuring backup procedures are in place - are you regularly testing restores etc.

 

Security policies - are you using encrypted devices, are your used forced to change passwords on a regular basis, do you have sufficient rules in place for complex passwords?

Is your Hardware security marked?

Software licences - is all the software on the network fully licensed etc?

They may even run some tests on the network for speed, security (penetration testing) etc.

[JB7]

Let me know if this attachment is helpful.

I work with a Multi Academy Trust and this is what we came up with after various meetings that we wanted to know from each Academy, so possibly your local authority/council's could be the same or similar

 

ICT Audit.docx

[DanTheLacky]

Had a friendly one from KCC - EIS once a few Year back.

 

It was more like to help the Schools with Backup procedures, security, filtering. All the kind of stuff any NM really should know/have.

 

Expecting one from KCC soon actually, was under the impression it was just the asset register was correct. Will have to update all the other stuff as I know that is not correct / out of date.

[psydii]

We had one about a year ago.

I was busy sorting out some projects and not on site. So my team fielded them.

Having documentation, and a team that knew what was going on and how to get stuff fixed resulted in a very positive review.

[Hogwarts-Techie]

We are in the process of having one now, from SCS. Was really worried about it. Even though i know we are 100% correct. They have done the following

 

Asked me to fill out an audit form, network diagrams, software agreements, budget expenses, ICT asset document, helpdesk analysis, Development reports

interviewed staff and pupils on what they would like to see come out of the ICT development plan

Interviewed SLT on what involvement they have

interviewed Staff on skill set etc....

 

Will let you know the out come when i get it.

[Patman]

Hi Sarchs:

 

We can get quite stressed when we know audits are approaching. Remember that audits are there to help the organization - and you. I have just had my fourth audit in 18months (yes, you read that correctly!). Two were during financial audits, one was a specific internal IT audit, and one was an external IT audit. I have learned from all of them and we have improved as a result of each one. Try to take a positive attitude that you are going to learn from them. For me, it turned all of the processes into enjoyable, positive experiences.

 

Good luck!

 

patman