Audit Evidence - Desklib

Running head: AUDIT EVIDENCE
Audit evidence
Name of the Student:
Name of the University:
Author Note

1AUDIT EVIDENCE
Control Objective Control Explanation of Finding
Control Objective 1: The
controls provide reasonable
assurance that physical access
to computer resources within
Gail Industries’ data center is
restricted to authorized and
appropriate personnel.
Control Objective 2:
Controls provide reasonable
assurance that physical access
to assets within Gail
Industries’ facilities is
restricted to authorized and
Administrative access to the
badge access system is
restricted to authorized IT
personnel and the datacenter
requires two factors
authentication those are
biometric credential and
badge access system.
The door badge access system
is adopted to ensure the
control access of facility areas
though the use of predefined
The IT manager perform the
review of badge access
privileges on a monthly to
ensure that terminated
employees do not retain badge
access. The IT personnel also
revoke the badge access
privileges of the terminated
employee. Apart from that the
all visitors must sing the log
book before entering the
datacenter along with their
provided ID cards. The data
center is also covered with the
CCTV surveillance camera to
record the activities in the
datacenter.
The badge access system is
restricted to authorized IT
personnel. The individual
need to request on a
standardized employee

2AUDIT EVIDENCE
Control Objective Control Explanation of Finding
appropriate personnel.
Control Objective 3:
Controls provide reasonable
assurance that environmental
safeguards protect physical
assets and the data that resides
on those assets.
security zones.
The management retains the
inspection report of the third
party vendors as evidence of
their completion.
management form though
Gail Industries employee on
boarding system. The visitor
must sign into the log book
and ring the video door- bell
then introduce themselves to
the receptionist to unlock the
door as the door of the data
center are locked and
monitored by the
administrative personnel. The
visitor also escorted by the
authorized employee when the
visitors access to the sensitive
facility areas such as the mail
room and server room. The
visitors also need to wear the
visitor’s badge all time during
their visit.
The management has
implemented the various
environmental controls to
protect the physical assets