IT Control Self Assessment

Overview

Not all of the University’s IT resources are under the control of the ITS Division, with a number of Faculties and Centres running their own local area networks etc.

While procedures within ITS are subject to regular review by both internal and external audit, control of IT resources outside ITS are not subject to independent scrutiny.

A self-assessment questionnaire has been developed which highlights security features required for control over computer resources and assists management in identifying risks associated with not implementing such controls.

Units are randomly selected for an audit. The Head of Department is then requested to complete the questionnaire in conjunction with the Resources/Business Manager and return the completed questionnaire to the Audit & Risk Management office within 10 working days. The majority of the questions merely require a yes/no response, although the opportunity exists for comments to be made on each of the questions asked. It is anticipated that most questionnaires will be returned by e-mail but the questionnaire has also been designed to accommodate the return of the document in hard copy form depending on individual preferences.

A current copy of the questionnaire can be viewed at IT Control Self Assessment Questionnaire - Monash only.