This document outlines a term paper assignment for an IT infrastructure audit. It consists of four sections: an internal IT audit policy, a management plan, a project plan, and a disaster recovery plan. The paper provides background information on the organization being audited, which is a large national retailer. It describes characteristics of the organization's IT infrastructure and systems. It provides requirements and guidelines for each section of the paper, including developing an internal audit policy, explaining the management plan for conducting audits, creating a project plan using Microsoft Project, and developing a disaster recovery plan.

1. STRAYER CIS 558 Week 10 Term Paper Managing
an IT Infrastructure Audit (2 Papers) NEW
http://www.assignmentcloud.com/cis-558-
strayer/cis-558-week-10-term-paper-managing-
an-it-infrastructure-audit-new
For more classes visit
http://www.assignmentcloud.com
This Tutorial contains 2 Term Papers
Term Paper: Managing an IT Infrastructure Audit
This assignment consists of four (4) sections: an
internal IT audit policy, a management plan, a
project plan, and a disaster recovery plan. You
must submit all four (4) sections as separate files
for the completion of this assignment. Label each
file name according to the section of the
assignment it is written for. Additionally, you may
create and /or assume all necessary assumptions
needed for the completion of this assignment.
Imagine you are an Information Security Manager

2. for a large national retailer. You have been hired
to be directly responsible for the planning and
oversight of IT audits. At the request of the Board
of Directors, the CEO has tasked you with
developing a plan for conducting regular audits of
the IT infrastructure. The planning and
management aspects of IT audit are critical to the
overall success of the audit, and as a result, the
overall success of the systems implemented within
the organization. You must develop a policy for
conducting IT audits and develop a project plan for
conducting two week IT audits.
In addition to the typical networking and
Internetworking infrastructure of a medium-sized
organization, the organization has the following
characteristics:
• They have a main office and 268 stores in the U.S.
• They utilize a cloud computing environment for
storage and applications.
• Their IT infrastructure includes Cisco workgroup
and core switches, Cisco routers, Cisco firewalls
and intrusion prevention systems, and servers
running Microsoft Windows Server 2012.
• They have over 1000 desktops and
approximately 500 organization-owned laptops in
the main headquarters.
• They allow employees to bring their own devices

3. into the organization; however, they are subject to
being searched upon entry and exit from the
building.
• They enable remote access to corporate
information assets for employees and limited
access to extranet resources for contractors and
other business partners.
• They enable wireless access at the main office
and the stores.
• They process an average of 67.2 credit card
transactions per hour every day at each location
and via their corporate Website.
•
Section 1: Internal IT Audit Policy
Write a three to four (3-4) page paper in which
you:
1. Develop an Internal IT Audit Policy, which
includes at a minimum:
2. Overview
b. Scope
c. Goals and objectives
d. Compliance with applicable laws and
regulations
e. Management oversight and responsibility
f. Areas covered in the IT audits
g. Frequency of the audits
h. Use at least two (2) quality resources in this

4. assignment. Note: Wikipedia and similar Websites
do not qualify as quality resources.
Section 2: Management Plan
Write a four to six (4-6) page paper in which you:
2. Explain the management plan for conducting IT
audits, including:
3. Risk management
b. System Software and Applications
c. Wireless Networking
d. Cloud Computing
e. Virtualization
f. Cybersecurity and Privacy
g. BCP and DRP
h. Network Security
i. Use at least three (3) quality resources in this
assignment. Note: Wikipedia and similar Websites
do not qualify as quality resources.
Section 3: Project Plan
Use Microsoft Project or an Open Source
alternative, such as Open Project to:
3. Develop a project plan which includes the
applicable tasks for each of the major areas listed
below for each element of the IT audit mentioned
above; plan for the audit to be a two (2) week
audit.
4. Risk management

5. b. System software and applications
c. Wireless networking
d. Cloud computing
e. Virtualization
f. Cybersecurity and privacy
g. Network security
Section 4: Disaster Recovery Plan
Write a five to seven (5-7) page paper in which
you:
4. Develop a disaster recovery plan (DRP) for
recovering from a major incident or disaster
affecting the organization.
5. The organization must have no data loss.
b. The organization must have immediate access
to organizational data in the event of a disaster.
c. The organization must have critical systems
operational within 48 hours.
d. Include within the DRP the audit activities
needed to ensure that the organization has an
effective DRP and will be able to meet the
requirements stated above.
e. Use at least three (3) quality resources in this
assignment. Note: Wikipedia and similar Websites
do not qualify as quality resources.
Your assignment must follow these formatting

6. requirements:
• Be typed, double spaced, using Times New
Roman font (size 12), with one-inch margins on all
sides; citations and references must follow APA or
school-specific format. Check with your professor
for any additional instructions.
• Include a cover page containing the title of the
assignment, the student’s name, the professor’s
name, the course title, and the date. The cover
page and the reference page are not included in
the required assignment page length.

7. requirements:
• Be typed, double spaced, using Times New
Roman font (size 12), with one-inch margins on all
sides; citations and references must follow APA or
school-specific format. Check with your professor
for any additional instructions.
• Include a cover page containing the title of the
assignment, the student’s name, the professor’s
name, the course title, and the date. The cover
page and the reference page are not included in
the required assignment page length.