Pertemuan 25 Matakuliah: A0214/Audit Sistem Informasi Tahun: 2007

Bina Nusantara USING TOOLS AND TECHNIQUES IN IT OPERATION REVIEW

Bina Nusantara

SYSTEM MAINTENANCE Is rarely acknowledged when it is done right but is always noticed when something goes wrong. Changes made to systems or applications software to maintain an effective, efficient, operational, and up to date system.

Bina Nusantara Maintenance Area Systems hardware Systems software Database software Applications software Environmental areas Network software Network hardware

Bina Nusantara Change Control A well defined, structured, and well implemented change management system benefits the IT organization by : – Reducing system disruption that can lead to business losses – Minimizing the number of backouts called by ineffective change implementation – Providing consistent change implementation that permits management to allocate staff and system time efficiently and meet scheduled implementation dates – Providing accurate and timely documentation to minimize the impact to change related problems.

Bina Nusantara Change Control Types of changes – Routine; have minimal impact on daily operations. – Nonroutine; have a greater impact on operations. – Emergency; must be made quickly, without following standard change control procedures. Management must approve changes before they are undertaken or implemented. The auditor should develop flowchart documenting the procedures for emergency an nonemergency changes.

Bina Nusantara Change Control The auditor should ascertain that all requests are submitted on a standard change request form that contains : – Date of request – Name of requester – Description of the change – Reason for the change – Approvals of the request – Areas that may be affected by the change

Bina Nusantara Reviewing Operating Systems Operating systems System utilities Program library systems File maintenance systems Security software Data communication systems Database management systems

Bina Nusantara Reviewing Operating Systems When evaluating system software controls, the auditor has several areas of concern, including: – Types and uses of systems software – Reliance on systems software to perform control processes – Controls over access to systems software – Controls over changes to systems software