in2sam managing the audit lifecycle - itam review uk conference 2016

Nico Blokland ITAM Review Annual Conference 2016 Sean van Koutrik Twickenham Stadium [email protected] London, UK

EXECUTION COMPLETION

Test on protocol/ Law /security requirements

Gathering information

Repairs of breaches (from

self audit)

Formal reaction to

auditor Appointment

Audit Monitor

Audit Monitor

organization

Start Self Audit

Data in DD Room

End report auditor

Settlement

ANOUNCEMENT & REACTION &

PREPARATION


•  conditions/send audit protocol

•  plan and schedule

•  Appoint Audit Monitor

Answering announcements

•  Start self audit •  Set attitude and

targets with level 1 and senior management

Appoint Internal Organisation

•  Process repy on conditions

•  Negotiation •  Check credentials

auditor

Process reply auditor

•  all conditions met •  formal start

"collaboration" •  Auditor supplies

baseline (entitlement data)

Kickof with auditor

•  formal technical tests script/tool in changeproces

•  Check output

testing

•  script output •  tool output •  arrange DD

room •  arrange and

process access

data collection

•  Audit Monitor last check on validity output

Check output

•  Deliver Output in DD room on secure environment

•  Structured conversations in DD-room

Handover informatie

•  Check accuracy •  Prepare response

Prelimenary rapport auditor

•  Formal response to prelimenary report

Response

•  Validity and accuracy check

•  share formal agreement with software creator

Final report auditor

•  Possible solution for breaches

commerciial negotiation software

vendor

•  financial settlement

Settlement

•  Evaluation by all involved

•  Archive lessons learned report

evaluation



Audit Planning

Audit Preparation

Audit Execution

Audit Follow-Up

Audit Request

Audit Date Agreement

Auditor Appointment

Requirements request

Agenda sent to attendees

Audit Preparation

Audit Execution

Preliminary report

Draft Audit report

Issuance

Final report Issuance

Communication of results to

attendee

Bi-Annual remediation

Plan Follow -up

Remediation Plan Periodic

Update

Action Plan sent to

Sponsors


Ann

ounc

emen

t Check manufacturers compliance position

Rep

ort c

ompl

ianc

e Send compliance report

Check contract

Fol

low

-up Renegotiate

contract

Make use of thread/’broken’ relation

Get an Audit cost clause in your contract: With a reliable process, it might even bring you a party!!


PIN 36131

Or use:

Live.voxvote.com


PIN 36131

in2sam managing the audit lifecycle - itam review uk conference 2016

Technology