Information Technology Process Audit - Suggestions for Auditing IT

[David J Quality]

Hi, I'm new and today is my first day joining this forum.
I'm trying to establish Information Technology as a part of our internal process audits but I have no idea as to how to establish it. Does anyone have any suggestions for auditing IT?

Thanks,
David

 

[Duke Okes]

Re: Information Technology Process Audit

It depends on why you want to audit it:

- security?
- compliance to a standard (ITIL, CMMI)?
- support of QMS?
- ...

 

[David J Quality]

Re: Information Technology Process Audit

Good morning.
I'm looking to add Information Technology as a stand alone process to our internal ISO/TS auditing, so it would be from a QMS standpoint.

 

[David J Quality]

Re: Information Technology Process Audit

I guess I'm looking for something generic that I can start with and then modify to make more specific to our operations. I'm just not sure where to start. Is Information Technology commonly audited as an internal ISO/TS process?

 

[Duke Okes]

Re: Information Technology Process Audit

IT is obviously a part of the QMS, such as for customer information management, order management, scheduling, inventory management ...

Send me a private message and I'll email you an article I published on the topic.

 

[Cari Spears]

Re: Information Technology Process Audit

Good morning.
I'm looking to add Information Technology as a stand alone process to our internal ISO/TS auditing, so it would be from a QMS standpoint.

IT is obviously a part of the QMS, such as for customer information management, order management, scheduling, inventory management ...

It depends on why you want to audit it:

- security?
- compliance to a standard (ITIL, CMMI)?
- support of QMS?
- ...

Welcome to the cove, David!

I agree with Duke - treat it as you do any other QMS process. Define the criteria, create checklists or whatever you use, and audit it just like any other process.

 

[David J Quality]

Thank you for your assistance !

 

[skybertus]

Re: Information Technology Process Audit

Welcome to the cove, David!

I agree with Duke - treat it as you do any other QMS process. Define the criteria, create checklists or whatever you use, and audit it just like any other process.

I am currently drafting our company's general IT procedure, we have implemented policies but not documented, are these enough to be put together in one document (under clause 6.3 Infrastructure) ?

1. Email/account policies
2. equipment inventory and preventive maintenance
3. IT physical control (security and access control)
4. IT system violation
5. contingency plans/backup policies

I appreciate your help guys. Thanks.

 

[QAMTY]

Re: Information Technology Process Audit

Try it as a support process, if your core system is not IT, trying to make it basic,consider it under 6.3 infraestructure, with computer maintenance prev and corrective and records backup 4.2.4.
Regards

 

[skybertus]

Thank you