Security Management Process: Information System Audit

The purpose of the Information System Audit is:

• To establish a procedure to audit team member logins.
• To track team members activity as they access organization’s files.

Procedure: The Security Manager or its designated representative shall conduct one or more audits during the year to ensure that no unauthorized logins are taking place nor that any unauthorized person had have access to information not otherwise authorized.

• The Security Manager or its designated representative shall proceed as follows:
  1. Select one to three employees to audit;
  2. Download the Information System Audit Form;
  3. Complete the Information System Audit Form;
  4. Take corrective actions, if needed.