The fourth audit procedure requires the IS auditor to benchmark the ITSC against similar organizations or appropriate international standards or recognized industry best practices.

The benchmark exercise is undertaken to provide compelling evidence that the structure, role, responsibilities, and supporting processes of the ITSC are sound.

To benchmark the ITSC, the IS auditor will be required to contact a number of similar organizations to obtain the necessary information. For example,

■ Member position descriptions

■ Number of members

■ Composition

■ Reporting structure

■ Copies of "edited" minutes/reports (where possible)

From this information, the IS auditor can benchmark the organization ITSC. The benchmarking exercise will provide evidence if the shape of the organization ITSC is appropriate.

Project Management Made Easy

Project Management Made Easy

What you need to know about… Project Management Made Easy! Project management consists of more than just a large building project and can encompass small projects as well. No matter what the size of your project, you need to have some sort of project management. How you manage your project has everything to do with its outcome.

Get My Free Ebook

Post a comment