Purpose: Ensure that all software distribution is consistent across all business areas.
1. Ensure that all software purchases, installations, removals, and upgrades are authorized.
Identify any automated or manual processes in place which ensure that all software changes (purchases, installations, removals, and/or upgrades) are reviewed, coordinated, and authorized.
Review a sample of software change requests.
Verify that an appropriate signoff exists for each change.
Ensure that all software changes are communicated to the appropriate people.
Note: This step does not refer to the configuration of operating system and application software.
2. Ensure software versions are consistent throughout the business area.
Ensure that the software used by the business area is consistent with the software used in all areas of the company.
Obtain a listing of all standard software versions being used from the Home Office.
Verify the software being used in the business area to this list.
Determine what actions are taken if different software versions being used are detected.
Ensure that all software upgrades take place according to a consistent schedule coordinated with the Home Office and other business units.
Ensure that all employees are trained on the consistent versions of software.
3. Ensure data integrity is upheld during all software changes.
Identify any automated or manual processes in place that ensure data integrity.
Determine what actions are taken if data integrity problems occur.
Obtain listings or reports generated by the different types of software from both the business area and the Home Office .
Verify that all information is consistent and that data integrity determined.
Purpose: Ensure all hardware acquisition and obsolescence is authorized and appropriately reflected in the hardware inventory and that maintenance is performed on a periodic basis.
1. Ensure processes are in place for the acquisition of hardware.
Identify any automated or manual processes in place which ensure that all hardware purchases are reviewed, coordinated, and authorized.
Identify and document all personnel and/or business areas that are responsible for the review, coordination, and authorization of hardware acquisition.
Ensure a product evaluation process exists to determine which hardware purchases will be compatible with existing equipment.
Ensure a cost-benefit analysis is completed prior to acquiring hardware.
Review a sample of hardware acquisitions.
Verify that an appropriate signoff exists for each review and/or authorization.
Verify that a cost-benefit analysis was performed.
Verify that a product evaluation was performed.
Verify that all acquisition are appropriately recorded in hardware inventory.
2. Ensure processes are in place for the installation of hardware equipment.
Identify any automated or manual processes in place which ensure that all hardware equipment is properly installed.
Determine the impact of hardware installations on the LAN configuration.
Ensure all hardware installations are communicated to the appropriate people.
3. Ensure processes are in place to monitor hardware inventory.
Identify any automated or manual processes in place which ensure that all hardware equipment is properly inventoried.
Identify and document how hardware inventory is classified.
Determine whether there is one central inventory (for field offices and the home office) or whether each business area is responsible for its own equipment.
Determine where unused hardware is kept.
Verify that this location is secure.
Determine whether access is needed to enter this area.
Identify and document who has the authority to enter this area.
Determine what procedures exists for the physical movement of hardware (e.g. supervisory approval).
Verify the equipment to the fixed asset list. This list can be obtained from Fixed Assets Accounting area.
Note: Hardware also includes spare parts (e.g. Mother Boards, memory, network cards, etc.)
4. Ensure processes are in place for the disposition of obsolete hardware.
Identify any automated or manual processes in place which ensure the proper disposition of obsolete hardware.
Identify and document all personnel with the authority to declare hardware equipment obsolete.
Determine whether the depreciation of all obsolete hardware is calculated and recorded.
Ensure that all removal of hardware equipment is communicated to the appropriate people.
Obtain a listing (or partial listing) of obsolete hardware.
Verify that the hardware inventory is appropriately updated to reflect obsolete hardware.
Verify that hardware depreciation is appropriately recorded.
5. Ensure LAN Hardware maintenance is performed on a periodic basis.
Obtain a copy of the LAN Maintenance schedule of tasks