Risk Management: GREEN

• Audit Title

• Document No.

• Client / Site

• Conducted on

  Date

• Prepared by

• Location
  Address

• Personnel

Backups

• Verify regular daily backup running

  Yes

  No

  N/A

• Verify regular shadow copy process running/ assigned disk space<br>

  Yes

  No

  N/A

• Rotate external backup media, bring manual backups inside FICT

  Yes

  No

  N/A

• Create manual backups of core business apps. And most crucial data

  Yes

  No

  N/A

Abnormal rights

• Verify rights on share/group memberships

  Yes

  No

  N/A

• Verify object auditing logging enabled

  Yes

  No

  N/A

• Offload copy audit files to backup media

  Yes

  No

  N/A

• Check administrators memberships

  Yes

  No

  N/A

Abnormal storage usage

• Check disk space servers, compare last measurements

  Yes

  No

  N/A

• Check database sizes all database, compare last measurement

  Yes

  No

  N/A

Update services

• Check functioning of automatic updates/Wsus

  Yes

  No

  N/A

Anti-Malware, Anti-Tunneling

• Check presence of virus scanners running on all machines

  Yes

  No

  N/A

• If presence check central virus log, if not check server virus logs

  Yes

  No

  N/A

• Check presence of prevx running on all machines

  Yes

  No

  N/A

Firewalling

• Check proper functioning of border protection/ firewalls

  Yes

  No

  N/A

• Check Firewalling logs of abnormalities

  Yes

  No

  N/A