IT External Audit

[robknowles]

Hello,

 

Do any schools use a 3rd party for auditing IT in school? Specifically in relation to policies and procedures, as well as testing of security etc, not for auditing what IT in terms of hardware we have and trying to sell us new equipment!

 

It's something we are keen on doing here, to ensure that we are doing what we need effectively.

 

If anybody has any recommendations on auditing companies that would be great.

 

Thanks,

 

Rob

[enjay]

I'd throw the net a bit wider, if I were you. From the viewpoint you're considering, schools IT is no different to business IT, so consider companies who provide such services to corporates.

[TechMonkey]

For security I know InfoSec Partners do a External Pen testing, Internal Pen testing, Risk Assessment and Security Architecture and Control Assessment.

A company called Novatia do a full IT Audit covering usage, strategy, documentation and affordability. Don't know much as they were meant to contact me after a conference but never did. From what I could see theirs was a more paperwork and process audit, rather than security.

A consulting company called 9ine offer a range of services from a starting health check up to an operations assessment.

Our local MSP offers an audit that can be as basic or as in depth as you like, so it can be configured for any need or budget. I'm sure a local MSP to you will offer the same.

 

I'm not associated with any of these companies and not used any yet so can't recommend, just been in talks or heard about them.

[dnanton1]

I'm also looking for something similar - independent consultants to do a review/assessment of our IT services, structure & strategy - so I'd be grateful for any recommendations. I'm familiar with 9ine and about 8 years ago my school used a company called BlueSpark Consulting who did a very helpful and comprehensive review but I'm just checking the market before going back to them.

 

In addition, I'd be interested in recommendations for an independent technicial audit/health check on servers and network.

 

Cheers,

 

David