SOFTWARE
AUDIT,STEPS &
ITS
SIGNIFICANCE
PREPARED BY,
SKYLARK TEAM
TOPICS:
 SOFTWARE AUDIT
 OVERVIEW OF S/W AUDIT PROCESS
 S/W SIGNIFICANCE
SOFTWARE AUDIT:
 SOFTWARE AUDIT OR SOFTWARE AUDIT REVENUE IS A TYPE OF SOFTWARE REVIEW IN WHICH
ONE OR MORE AUDITORS WHO ARE NOT MEMBERS OF THE SOFTWARE DEVELOPMENT
ORGANISATION CONDUCT “AN INDEPENDENT EXAMINATION OF A SOFTWARE
PROCESS,SOFTWARE PRODUCT OR SET OF SOFTWARE PROCESS TO ASSESS COMPLIANCE WITH
SPECIFICATIONS……
PARTICIPANTS OF IT AUDIT:
 INITIATOR
 LEAD AUDITOR
 RECORDER
 AUDITORS
 AUDITED ORGANISATION
AUDIT TYPES:
 FIRST PARTY AUDIT
 SECOND PARTY AUDIT
 THIRD PARTY AUDIT
SOFTWARE AUDIT DO:
 Determine:
 Compliancetorequirements
 Conformancetoplans,policies,procedures,andstandards
 Driveprocessimprovementbasedon:
 Adequacyofplans,policies,procedures,andstandards
 Effectivenessandefficiencyofplans,policies,procedures,andstandards
 Assesspersonnelfamiliaritytorequirementsanddocumentation
 Assureavailability,useandadherencetosoftwarestandards
STEPS INVOLVED:
 Conduct a software inventory (number of software, System Architecture, OS platform and
compatibility ratio)
 Meter application usage (application usage and its criticality)
 Gather software licensing data (licensed and pirated versions)
 Adjust license counts (order appropriate to the requirements)
 Establish and communicate software policies (software purchase & documentation, software use).
 Manage ongoing license compliance.
PRINCIPLES :
– Timeliness
– Source Openness
– Elaborateness (quality, Scope & Effectivity)
– The financial Context (background reflection)
– Scientific referencing of learning perspectives
– Literature-Inclusion (Bibliography)
– Inclusion of User manuals & Documentation (Analysis of Documents)
– Identify references to innovations (Continuous Reviews)
some important measures in
ensuring Software Audit process
The systems audit consists of an evaluation of the components which comprise that system, with examination and
testing in the following areas:
 High-level systems architecture review
 Business process mapping (e.g. determining information systems dependency with respect to user business
processes)
 End user identity management (e.g. authentication mechanisms, password standards, roles limiting or granting
systems functionality)
 Operating systems configurations (e.g. services hardening)
 Application security controls
SOFTWARE AUDIT DIAGRAM:
TOP AUDIT SOFTWARE
PRODUCTS:
 OPTIMAL SMARTSTART
 GRC CLOUD
 PROCESS GENE SOFTWARE SUITE
 GENSUITE
 MOREAPP FORMS
 POLICY & PROCEDURE MGT
 RETAIL EXECUTION PLATFORM
 COMPLIANCE 360
CONTINUES…
 ISOLOCITY
 AUDIT FILE
 R-CAP
 CHECKIT
 LPA ADMIN
 360 FACTORS
 KNOWLEDGE VAULT
 MK INSIGHT AND SO ON..
TYPES OF SOFTWARE AUDITS:
 ACL
 IDEA
 APEX
 HAWK
 WINIDEA
 SECHECK
 TEAM MATE
 FFMS

Software audiit information management

  • 1.
  • 2.
    TOPICS:  SOFTWARE AUDIT OVERVIEW OF S/W AUDIT PROCESS  S/W SIGNIFICANCE
  • 3.
    SOFTWARE AUDIT:  SOFTWAREAUDIT OR SOFTWARE AUDIT REVENUE IS A TYPE OF SOFTWARE REVIEW IN WHICH ONE OR MORE AUDITORS WHO ARE NOT MEMBERS OF THE SOFTWARE DEVELOPMENT ORGANISATION CONDUCT “AN INDEPENDENT EXAMINATION OF A SOFTWARE PROCESS,SOFTWARE PRODUCT OR SET OF SOFTWARE PROCESS TO ASSESS COMPLIANCE WITH SPECIFICATIONS……
  • 4.
    PARTICIPANTS OF ITAUDIT:  INITIATOR  LEAD AUDITOR  RECORDER  AUDITORS  AUDITED ORGANISATION
  • 5.
    AUDIT TYPES:  FIRSTPARTY AUDIT  SECOND PARTY AUDIT  THIRD PARTY AUDIT
  • 6.
    SOFTWARE AUDIT DO: Determine:  Compliancetorequirements  Conformancetoplans,policies,procedures,andstandards  Driveprocessimprovementbasedon:  Adequacyofplans,policies,procedures,andstandards  Effectivenessandefficiencyofplans,policies,procedures,andstandards  Assesspersonnelfamiliaritytorequirementsanddocumentation  Assureavailability,useandadherencetosoftwarestandards
  • 7.
    STEPS INVOLVED:  Conducta software inventory (number of software, System Architecture, OS platform and compatibility ratio)  Meter application usage (application usage and its criticality)  Gather software licensing data (licensed and pirated versions)  Adjust license counts (order appropriate to the requirements)  Establish and communicate software policies (software purchase & documentation, software use).  Manage ongoing license compliance.
  • 8.
    PRINCIPLES : – Timeliness –Source Openness – Elaborateness (quality, Scope & Effectivity) – The financial Context (background reflection) – Scientific referencing of learning perspectives – Literature-Inclusion (Bibliography) – Inclusion of User manuals & Documentation (Analysis of Documents) – Identify references to innovations (Continuous Reviews)
  • 9.
    some important measuresin ensuring Software Audit process The systems audit consists of an evaluation of the components which comprise that system, with examination and testing in the following areas:  High-level systems architecture review  Business process mapping (e.g. determining information systems dependency with respect to user business processes)  End user identity management (e.g. authentication mechanisms, password standards, roles limiting or granting systems functionality)  Operating systems configurations (e.g. services hardening)  Application security controls
  • 11.
  • 12.
    TOP AUDIT SOFTWARE PRODUCTS: OPTIMAL SMARTSTART  GRC CLOUD  PROCESS GENE SOFTWARE SUITE  GENSUITE  MOREAPP FORMS  POLICY & PROCEDURE MGT  RETAIL EXECUTION PLATFORM  COMPLIANCE 360
  • 13.
    CONTINUES…  ISOLOCITY  AUDITFILE  R-CAP  CHECKIT  LPA ADMIN  360 FACTORS  KNOWLEDGE VAULT  MK INSIGHT AND SO ON..
  • 14.
    TYPES OF SOFTWAREAUDITS:  ACL  IDEA  APEX  HAWK  WINIDEA  SECHECK  TEAM MATE  FFMS