You are appointed as a Junior IS Auditor in one of a big four audit firms....

Transcribed Image Text:

You are appointed as a "Junior IS Auditor" in one of a big four audit firms. The firm has assigned you to carry out the audit of an IT company with your seniors so that you can start gaining experience. Your senior has asked you to go through the industry's best practices regarding Inspections and Walkthroughs so that you can have a good idea about the current assignment. The audit is related to the SDLC processes being followed in the company. You are required to evaluate the below mentioned process and formulate your recommendations related to what should be added or changed in the process to make it more effective. Following is the process to be audited: "After completing the work on a Work-item, the author of the work-item initiates the inspection process. The author then invites the Manager and can carefully selects the required participants (maximum 5) and go-through their Schedule-diaries to find a suitable time slot. He then invites the participants for that time-slot and books a Meeting Room for the Inspection purpose. During the Inspection process, the Author presents his Work-item to the participants. The participants provide their view points and the final outcome of the discussion is noted by the Manager. Apart from the participants invited by the producer, the Manager has to invite 2 people as observing participants. The main objective of the Manager and these observing participants will be to evaluate/provide feedback about the skill-set of the author. At the end of the Inspection session, the Author needs to submit the final findings of the Inspection to the Manager. The Manager needs to evaluate the findings and determine if any rework is required and assign that work to any of the peers of the Author". Required: 1) Which type of audit you are conducting? Categorize this audit as first, second or third party audit? 2) Into how many phases you will divide this task? Briefly explain, what you will do it in each phase? 3) What are your recommendations after this audit? You are appointed as a "Junior IS Auditor" in one of a big four audit firms. The firm has assigned you to carry out the audit of an IT company with your seniors so that you can start gaining experience. Your senior has asked you to go through the industry's best practices regarding Inspections and Walkthroughs so that you can have a good idea about the current assignment. The audit is related to the SDLC processes being followed in the company. You are required to evaluate the below mentioned process and formulate your recommendations related to what should be added or changed in the process to make it more effective. Following is the process to be audited: "After completing the work on a Work-item, the author of the work-item initiates the inspection process. The author then invites the Manager and can carefully selects the required participants (maximum 5) and go-through their Schedule-diaries to find a suitable time slot. He then invites the participants for that time-slot and books a Meeting Room for the Inspection purpose. During the Inspection process, the Author presents his Work-item to the participants. The participants provide their view points and the final outcome of the discussion is noted by the Manager. Apart from the participants invited by the producer, the Manager has to invite 2 people as observing participants. The main objective of the Manager and these observing participants will be to evaluate/provide feedback about the skill-set of the author. At the end of the Inspection session, the Author needs to submit the final findings of the Inspection to the Manager. The Manager needs to evaluate the findings and determine if any rework is required and assign that work to any of the peers of the Author". Required: 1) Which type of audit you are conducting? Categorize this audit as first, second or third party audit? 2) Into how many phases you will divide this task? Briefly explain, what you will do it in each phase? 3) What are your recommendations after this audit?

Answer rating: 100% (QA)

1 We will be conducting a secondparty audit since the audit is between a customer and supplier based on the contract between them Also since this audit does not discuss certifications such as ISO9001 ... View the full answer