Audit Plan Template.

BSA/505 v4
Audit Plan Template
Complete the table below to develop a risk-based audit strategy for Gail Industries. Be sure to
also include any uncontrolled risks in the table. Add additional rows to the table as needed.
Risk Control Audit Strategy
Uncontrolled access to
datacenter
Physical control within data
center should be restricted to
accredited as well as proper
personnel.
Two-factor authentication
such as a badge access card
and biometric credential by
retinal eye scanner should be
implemented
Uncontrolled access to
facility
Facilities require access
control to handle that who
can enter the facilities and at
what timings.
The door badge access
system is involved to control
access within facilities.
Risk of environmental
safeguard
Environmental controls
should be implemented to
secure assets
The smoke detectors and
halon-free fire suppression
system should be used to
secure datacenter.
Unauthorized change in
management
The changes to system
software and network
infrastructure are required to
be documented
The detailed testing is
required to have control over
unauthorized change in
management
Unauthorized access to
network infrastructure
The operating system
resources should be allowed
to the appropriate user.
The information security
policies should be updated as
well as documented to help
the workers.
Unauthorized payment
process
The payment processing
policy is required to be
documented.
The physical access privilege
of data entry workforces is
separated from balancing as
well as mailroom personnel
Unsecure data transmission
Data transmission is required
to be secure by additional
security.
The E-mail encryption can be
best audit strategy.
Unprocessed deposits
The deposits should be
processed on time and at
accurate basis.
The supply schedule should
be continued in the mailroom.
Copyright© 2018 by University of Phoenix. All rights reserved.