O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

4.3. Evaluating Account Administration

The processes and procedures of administrating the users' accounts will be found in every system and application where access is permitted. The main functions performed in providing this service should be independent of the application modification and data access functions to ensure that only the users identified and approved by the data owner and stewards actually receive the accounts. These accounts should contain only the permissions defined to the individuals' preapproved role in the organization. The account administration function often serves as the first point of contact for the users who are interfacing with the applications, therefore making customer service a big part of the administrator's process.

Documentation of the procedures followed by the account administration staff should describe the processes used to perform the tasks of adding, modifying, and deleting the accounts. Routine maintenance functions, such as the termination of accounts and cleanup of dormant accounts, should be evidenced in these procedures as well. The procedures should be updated and reviewed periodically for accuracy and applicability to current processes. Job descriptions will need to be gathered and assessed for the proper segregation of responsibilities and completeness of administrative duty assignments as part of your evaluation. Proper training and management support also will be expectations that the IS auditor will have to ensure that the service ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required