Matakuliah : A0214/Audit Sistem Informasi
Tahun
: 2007
Pertemuan 25
USING TOOLS AND TECHNIQUES IN IT OPERATION
REVIEW
Bina Nusantara
Bina Nusantara
SYSTEM MAINTENANCE
• Is rarely acknowledged when it is done right but is always noticed
when something goes wrong.
• Changes made to systems or applications software to maintain an
effective, efficient, operational, and up to date system.
Bina Nusantara
Maintenance Area
•
•
•
•
•
•
•
Bina Nusantara
Systems hardware
Systems software
Database software
Applications software
Environmental areas
Network software
Network hardware
Change Control
• A well defined, structured, and well implemented change management system
benefits the IT organization by :
– Reducing system disruption that can lead to business losses
– Minimizing the number of backouts called by ineffective change implementation
– Providing consistent change implementation that permits management to allocate
staff and system time efficiently and meet scheduled implementation dates
– Providing accurate and timely documentation to minimize the impact to change
related problems.
Bina Nusantara
Change Control
• Types of changes
– Routine; have minimal impact on daily operations.
– Nonroutine; have a greater impact on operations.
– Emergency; must be made quickly, without following standard change control
procedures.
• Management must approve changes before they are undertaken or implemented.
• The auditor should develop flowchart documenting the procedures for emergency
an nonemergency changes.
Bina Nusantara
Change Control
• The auditor should ascertain that all requests are submitted on a
standard change request form that contains :
–
–
–
–
–
–
Bina Nusantara
Date of request
Name of requester
Description of the change
Reason for the change
Approvals of the request
Areas that may be affected by the change
Reviewing Operating Systems
•
•
•
•
•
•
•
Bina Nusantara
Operating systems
System utilities
Program library systems
File maintenance systems
Security software
Data communication systems
Database management systems
Reviewing Operating Systems
• When evaluating system software controls, the auditor has several
areas of concern, including:
–
–
–
–
Bina Nusantara
Types and uses of systems software
Reliance on systems software to perform control processes
Controls over access to systems software
Controls over changes to systems software