f Ahmad Tariq Bhatti FEMA, FPA, MA (Economies), BSe [eater ie dames? ave al pesca pro seeded and auth apprprs [punt “TA th ED permet cul nda? | As atens amt programmers dave acs othe rae | Scanlon ta operon the compte? [are speak aed rw maha io rogram Stat ering ors ts ran ov ake esas Tee cot ete rata orn] ate the EDT "|e arati data procoing pln developed by the company Bethe [Esra ee eeneyer Te sereany tay prune! win daparicn! whvss ence | | SiESct company wn ented eet? "it Ofjctve | Dues the craton of dat processing provi fr este [Seresaton oaks ‘At recta Siw te copay organization chart, and the data processing Apartment organzaton chart | hore asspurate EDP Aparna within he company? Jt hore asters commute whore the dues and responses "Hastie company devdopedan tracey Baka wih the eng a | icine ote pa [athe HD Departement the war apart ani Particular th secant dopant Acros ral pwn EP | Set el terol dications a mend ASgnated employe? “ [Aver penn protabitd fw having nccmpaite | Siponliis or dls bar ducts nd oe era Tato weten spar jb in fac ED Deptt? [ase oom mcs within ths EDF Departmere period] | Bysnurate ane [> sat deer = Nppticaton rogram Seer [> tabs cent? [+ Stems prowrnine? + tata caty and cot? [Riis a prc pe TT Tae NG | [Resse f transact? | Avetherepmcedumsto crauae and eth who has aces 2 [Ae the ED poromel aaa ‘Ne apts ana pregrammcrs cone acces othe come ‘ora ined tha apeaion of he corte” ‘Are pera bared fom making chang operand om | Steang or amending dita fetore dung. oF afer Yrocesag? Ts the custody of wots rastectad bpomonmelcutde the EDP ptnentt [teat a rcesan pn veal comong the schoamet gtr ae {igeean sy aes ee apa fso2S ase [A toreany key posonnel who as Beng ove ned? 7s ana eng cara yer act cea cata ont fo sre connec of plc nd cos | SUNG hy management SE au ing cara by eral xan enema aaa | coma is cance of ps ance Pmocaaa MANE sree "a | Robeopeent se changeto rogram are ater tad a pyrowele pr tokeby placed pec | Seems vi ee a [spp prt bog pack peices | Progam Maina Ani - Posed | aww cnt aude! datos each Bay | ote the posers doar prosrams | Progam Menace An Proedaes Revi dlls tthe program ie [-shciasarony ane | Sotethe procaduras used foamed program structure and te contra eto ass ca Shear "Obtain a understating of any pga Rhrary manager!Are ore writen anand fo program ma ounce? | av tncepmectie our tata rogram or tmenicnane arekepliea ure pera et Har? Av ise ands abhor to and elo? ‘Arta alanis revenedegualy an approval? ‘Are thore psd nie that al pegramerequte Gr Danae ane hep asfurte peo heay? ‘Ave programmers devi ace alllbrares ther than the te ary? "Assan jin aly wr ut on "are grates dnl cess aliens the tan thet iba shag ram tay wien apt om er ‘Ate changes init by Data ose De Szenantsted ota ae gproetty hea ‘Are there adaquae conta ovr the Fans of pregame | proacton itohe programmers tary? Av shanges ina by Dat oceing Depurtrent Sechanied onecrs on prodigy tee ‘Ave ystems devepat changes b cating stan stat Scoring te wer apyroed tet pans ad staan? ae Shreadapee eaiederec Ba tones ol ap | modo ihe snare iy "Ae es perform or tom acceptance aelicat da ASeumonest? Ae alleptne develops or change em ttt Score tone proved ot pans and sada? "Arts petra rsa async a a omental sae |{Sareseatot brent nienttlec oman [1h rcs crour tat ch ans ca ak pce [seule Sune hans bon oper edad append? ‘retro lita the potion {Seaprmciat ta iy pele maki ta pogremaa cafe ener ha no ich tomar cam ks pace written haven reper stand sve? "ea rpeet of progam tran ts viewed oa ds teasby scr oficial to nme dyad ander hue book? Tea report of program rain prsiclon reviewed on a ‘dy Raae y's nr eta to owe ony moms anc hice? Areal program changes prpey docu? Ate program hangs propery documenta? ‘Arc al changed programs immeditcly hacked up? ie aay tthe previo enact he pogram wanad Gre Ine fron pbs aca wh th eed veo? isa copy the remoanworb of te program rained Wor as Inthe eto ons arang she md era fr hrs std fr anergy cha made epics progam ‘Ae there sind fr emergency charg fo be mack pera Arc there adaquae conta over grin resentation? tcl major amended yer aul fo comment” “Ae thre formal standart fe sytem developmen Biecyce roca? “Are thercadauate antl over athorzalin, plementation, pyro and documanon of anges operat ng EM ‘Are there procedures addressing controls over selection, testing stndacecpiance of puckgad etwas ExRysieneinnenns arate | ‘maintained for aT avars ie ahotaton the vans dag of development diy analy, nou ayecttetion, eats ol rau, past impkmenatim rere. cle? ‘Do the sandanls rove atone rhe ascent cearaed appheaios? ‘Ae star rely weve were uaa? Do the ada jt documentation ot + Rogan lo mua and mst prog? + Veer lctory opetae he sen? ‘Accom to Date ase he eral ct dopant Fo ished tie sige Slips tensa aes orcs “Trt pam ase Propane Maircnance Praline or athoang new are Progam Mauiennce peek eer ay alan i uty ley Gnawa ane passed nny ecemnay ifort, the security pliey covalent to lndivihala nthe Seance? Ane ed dat pcg pcre aga na we the new applications? y ct pe ant ely ihr para a [es plata! acco 1.0 ne data eset i + Comper oou [= oats ikeary? Oe ate ubvary? tam hoodand wopety eobeae = ee ‘oes the commun enpoy a ul ne beatin whe | ndcpendentor the operstorsund programmes hr logis iar th wg poh ea eg i in ‘ethore a Quiiy Asurance scoutanes of apchcatons droerd? Function overly he gry amt [Ave trans locked during de absence of the ibriant? ARS requests Fr on-line access 1A ne flss apoE ‘Ars savers checked withthe wna ler awed and ted by the ieee ‘AR snative applications papel manained om muahines (Scab etteca[Ae age ln pd ctr ction ieee 1 Dacha low eas fr theeaccionof regan? 2 _| Are mon-schatul jobs approved prt big rin? 4 [iti ct wy prepemsconoted Gn priser eat | 9% anchimgeeaeeust cue or dt? ‘Ae non-chalal spre pre oe raw? “Tete weet bey programed parser se at avsinge cmaab ode dal? Ae gra et edt nk ov fs? (pacers nh calient Sense ememey __ Teaser cmapucr on otal © ly auth pen {0 Are pram te ana copes oh es? [ve verdes sem chacsby opersos ciel? [Aoseragtiva mpi rom ona el al rei npc prot hoe ton ptr uh oe © snymaprine persoonet? iicibwal ert coment [as arethese nkpendetly erica? > Ss sulckontperating wuzactons ot overs prowaresto ict a Spot 10 ss, athe indeplonly iowa? in B images checking proguans nan poral for chasking the _semocy and soreness tinge been recor? — SeENeSTERgemeEE: || @ pomenemes 1 there any proper paso mt n-ne [inizimum hurasor andinele phanumars charac? |e ingurycecking prans pein cig te my todas st nage een oa 2 eaten See ee | SSeS eerste Soe oes Tare tonesiickry procs Gr aban pawl wey who tae ste thes? [Ase recais in plas amet mpc femal of _ hana employes panned? a ey "resem acs comptes prop changed wi nO [Reco cane? 9 Me prolisinplice tour the compli femora of [tsmiuted employe puso "Are asda ob responsibis conacred wien grant ests eed hia wie pce arti? ‘Aethere prcaducsinplace we csr orcas pasword tierevery 0 a7 ‘Do contoftcnaite mauthorved baie or trance prownteaticm fone scoped e Wey ame detect? 1s giant stunding dapat veri again he maser fe? apes kv cur welatons a De std och Gr tow up oy ‘Do formal and documented precaursoxstforus id ‘nourngss da upaccen acy {Tie wade of psswonds orem asc pee 1 [Doers mstowatidy KA or at prio me? faabuiy checks lant os ete? 1s mada age mad fait checking check igs, range and ‘there recedes cnc all vouchers have ben Cig tucch ais doctmacad counts, suence purist? “Arothore procadioseaabuhed to ease ta wansatonsoe ics ae no st, gles anpropaly hanged Areal rors weporea for checking and cortecton? thee lit he tf ia pons Be he 4 Leathe wnt Arthoteanyadmunstratye milton nt psa acco 6 mtu 1 | Ati sown temts portato ue dpm fig 1 Set asd chap ean ut. ls, ie pga a rout SS i preceaic ctears fleas octal fo prem 1s an ror kag muanfoined and reviewed to ennfy recurring Aimee appeal mn inant oh oat choc ed lacing pce ‘Are pores capone for dalucniry proven om me ile edt ae ne ‘Audit Objective ‘Theccstrel provide resonable assurance hat teanaactions are ly preantd by the computer ae utp! chard copy ce EERE U Sonya wl ara wl ated mea ae | Besitaccuraely computed ‘Where caput Romone aya is input another are an fF ‘Dual, cesar checks wed to were no dau sit ce soeruptedpam mad of prgtammes ch memes + | Reacts fandom ht oe dtd pot Whee calcio carbs Gacoia pau « pranamd {Reet eee mer Ha ala hon ated the virus preven pocerest ‘Ag dows from orc sored by eck the hard Sains troghisivas ate word te vous Gta? incor pring? nonce m oekartor reportage 1 | isconetaton tien inp up and brag ren Liseyecoeperpep nena Are nuptial chock era na inc ae? [hey enc repntsecwed nd aecup a ty thee any oper pobre te weer he ‘ate atthe fw {snd spe at ths cBscresotat potrtsn™ trades epee ‘Ds th plcywpprite Kise use and Aw of dat ac eintematio ping tig Grewal ppriy mone? there a maser rary of each sofware? Determiner mages giana gral ade ce Faiky te meen mancoraneis ee pt pep comunc i he wr nd rnc av the cnpany coploged a fecal Aira? Isreal comiguras ee scuiy pti? [UL svening beng porta by Brow 1 [Ave rece parcel reviewer eupiciu es? st ri son te ner guy chido carga? 1 [issn -reus pectin cela? (i -rstr ele on ienconpies gta ie ict arcade rocansal pa | 1 [vas tre es ad now iw tints? scabvaehawtle ctwctte taacberetndnamuned > Aegina i th emia Ase epee revi ai ny cit he Are diskettes formatted before re-use? r—] T 1 [iegces egtrato toro Bair [tat ptt day ma ne Capote? mea rote i | Check the safety against fie in the folowing ways: I Scpanton bom combue material paper fl? I Sinking restric? [> Fre teaaant sak Or aps on decane? 1: semaeeseentn ort [hte areprie arranges fie detections devces |_| |*_biedtfiealam ten? Te Sincke/ Festi detector? TT tpi args ffi ig [epee el ening and nr Roa? 7 Te ta srt rk a0 [= Detector sated nal sy BDF ance Att tm Linked to ire alam stom? heck the appropriate arungemens fr fire gang: ‘Halon gassystom (or key EY areas) = Avtontaie sprinkle ase | | net on pts aid t + Execfacas brie erica hack appara ranger inca oe meg = Penable CO2 extinguishers @hecincal red) aaa 1+ Buettner las tad 2 me cf sens fv fie rvs 1 Buea buts deat vse [= Pieinsructins early post Fecal baton deal abe Emergency power-off procedures posted | Cheat there is training to aud fine merge: Regal fie dil and taining Regular iapection/teting of at computing sputpmnent EES creel reece cme oem | Ee: aire pe: see Gist taining te nrg Exacuntion pln, with askgumentof wks and resporsiites 1 Bvzuae ly, wi asjgmento( wis and spss TF Wear icing 1 Rep ops tal paige __ARCoONDMONING ewig een anny DP araPower Supply [> Reka Kealpomer sap Sepa computer oer sur + notable Keal pone ah Separate computer power samp {Line vole motored Powersupply rogue evita achat) Lin tage meine 1+ Powersupply regula or voltage fitation) “Altomaive poms spy Gavarace Hnagens lights sem Unimcraped poe nary faery ven) available + Allmative power suppy (sz Geneve) Fnarssncy Kiting stan Communications Network + apical protic of communicators ins mas tiple and process 1 gsc potion f communications ines made, snupenre ae proces + Location communication aipment spate oe min iDrequpman [> ack up anc lupin a diet nee + ston communication agp sept on main EDP equipment + Rack up and di pins Gr dct Bae Machine Serve) Room Layo l nt pies Deter praca 1 Machine Gere) Roe apt + Wikis potas kenedin epwiearca rial propa x burt lod insepatc ara “ape /Dik bar in separate asa Machine rosa ep il + Prmut prepantion using losin separate ae 1 Prati ein of city devo “Tpe/ Dak ibrar i separa area Machine oom ep ey TEmagorey power ff wich | Beane Rote DP ae: [o_o inoaesary ontanesstothecompuse nom Te terion nitring el doesnt he ule hove Cd mae = Arent and yg acess ean eos Ros ODP ae Te Proc and onl of llopen ore Mo weccary atest the computer een t it fice + Airwtand dag asses beat 1 rsoeta and coated wet allopen oes q Tae atedloadered npr q 2 icrapacralragalir al ther ampoes tT [tna dnl 1 loeretbieeaiagiee +> ane i 1 [sea pontrpad rte op Cy | tto/comlntons Ct 1st disomy Bcc ad hey [>see sed [ [e Other - ologea! Mewtiicaion devices LI > Aadafembtts {2 Rea otenon Callenplees Mec Lies 5 (Vevikabnofaltaowstken woaniowetbecompucrrocn [| tha boa emia {| [Rote ication ofa ployee ae Miia cred . | ee es 1 | etn ofall tate to and out compute oes] | f : 77 tock combat, badge adeschanged poiiealy (41 Visto Control| Pomtve ileveaticaticn always [ass tat camel ee oT T Sco [Vitor cpa and taeda ine Tea ety [Arm oytan uo cot microsomes Vince accompa and Iara allies | crane or med to scar 1 Termin ety | See option og pews ain nai A erased 6c ae [pips ce ‘Aura weno Ba | einai ed ay tatedae Trial bays ‘Faomsh chant ory | Heit bs een plone era Rane chant Ger oy tiation beso ace ac feral Gomera Security T | Nase plese eo cs nate da [ Wiwand door alm atom Cha cavittlvaion nonioring COTW camer [ oss crt ero menting COT cams “ mmscromroucrs nes aa FS Ig ds eae | Revgndges maui acandig 6 )cbdacijton a posta peemeis le ty cd ud Feces an groan onlyee Moy candied erin eatin nd guru coming auton program ‘ota etn pra Trang ery, ia an Se SSAA Cri at mia pray og aperator, pra Sami ere lean dee pty avons aay imac for hey prec (os spon fp mn ome ne so) Amat seacesof spp? matntnanc/ sce rule Contras serice pera ve ane) Doce uate surance exe come ‘Raga md mare documenintn/ tack-apet dat mcd pera ce cee cme non Kine on ate sorage apnea? Sowane and dum? Reaare yur Ioan Sstoragemechat Replaconen eo ea a? eo datacentre? + Washes ov iertion husnossceical arte? eicogate citntin ge ve ant oto Adee psc provetion. Leg mua of f-le malas OFF emory weary vise il transportation under adequate hyial prtection ack up ils perdi este a le crib and toi procedure nguary reviewed gupment (computer and ancl) le Regular prevenve maintnance ‘Arlene thre gnats of anprtnt tape le ean Rel mamdactcr rice Arngonens or back [compatbity gully checkad Cops of all updating tana fr ahve resid Athens cme gecesi ada noceamry gating osmaacona | Sivaae axed Slick compar ts alae wack up ‘esting at back up rguarypoormed Sap esa CSA pore oe‘Atenas sunset ppt waanlaance/ sore arthle [Sue eerttney makonscateat Ach crs an camnton ai ase 1 Ofte Some: ‘Adept piycalotction Log muita to site eae is ciicality andrea ocak mgublyvoviowed 1 tape [Ales tec gncrationsctimportnttae tes euined | "Cops of al pda maar ahs Font ‘tka ror anal nssy upg nso Cine Fear peocns provid oe i ogo erate ping a[ AG wa og Ho gal damped anata a ae vu Sotware iT setae Copies flowing maintained at off ale oeage Poducton ‘pial prea ‘Spo and program documentation “Major programe under develope 1 Segunda oa nr [= stgor preva under devdopment + sem and propa documenta ——s + operatic ad ptr fe [Prony asjgumon fr allappicions "rosea oc rors ta fs and an eu oe Penaly tested ts ens conny in ca pesos |Seroee |e a comprehensive contingency plan develope, documented and "Doss te comagency lan rove ow Reovery and exon prcesang of ciical applications the erento alas ig [Coal rocsg pris ei eg ic aning [Arebtr roe kan tll opp dar 7 soph? —__} | "ero mink tin dere ea 9 | dimlautne acanteecomavcr ita?” | Cerner en andi ak iG "pte omg dcp aie » | Square }—}- AL Are potest thedowkpment fecal ems? ata et wh ae esha miu nt wae Dees: oe plea inthe fae: [+ Noboru etedharse ped T+ Novapasning oils aud poset [+ cntiytaopthtpssng || + Opening rocalanes To Alcor eile upsitad [> Operation andayton sare a py opts regi oa + Alloopis: egal updat = Rack up cops regulary ted eae 1 | pack wp procedine mama 1 Operations 2 Frist atten or all epline 9 Pisin estar dita sand ae Pda ‘ack up rosedive mama ao pita "Pc the i eecreryand onde eee “Srna catatrep ne |Seee rie ee Has ay sins pact Anas cared cy te gy? “Communal all management and perind oncerd