SOX.1.23:: Difference between revisions
No edit summary |
No edit summary |
||
| Line 9: | Line 9: | ||
'''Testing Procedures''' | '''Testing Procedures''' | ||
<blockquote style="background: white; border: 1px solid black; padding: 1em;"> | <blockquote style="background: white; border: 1px solid black; padding: 1em;"> | ||
Obtain the criteria and business case used for selection of third-party service providers. Assess whether | 1. Obtain the '''criteria''' and '''business case''' used for selection of third-party service providers. | ||
these criteria include a consideration of the third party’s financial stability, skill and knowledge | <br> | ||
of the systems under management, and controls over security, availability and processing integrity. | <br> | ||
2. Assess whether these criteria include a consideration of the third party’s financial stability, skill and knowledge of the systems under management, and controls over security, availability and processing integrity. | |||
</blockquote> | </blockquote> | ||
'''Testing Frequency''' | '''Testing Frequency''' | ||
Latest revision as of 15:57, 25 June 2006
- 2. Risk: Third party service providers are not qualified, and are incapable of delivering required services.
- a. SOX.1.23 A designated individual is responsible for regular monitoring and reporting on the achievement of the third-party service-level performance criteria.
Testing Procedures
1. Obtain the criteria and business case used for selection of third-party service providers.
2. Assess whether these criteria include a consideration of the third party’s financial stability, skill and knowledge of the systems under management, and controls over security, availability and processing integrity.
Testing Frequency
Annually
Evidence Archive Location
Insert hyperlink or location of evidence archive.
Control Stewards Process Narrative
Provide control steward commentary indicating the formal methodology in place.
Control Steward – Jane Manager
Process Illustration
Replace this test by inserting a process diagram, flowchart or other visual representation to illustrate the process narrative as necessary. Include a brief description of the process illustration.
Control Status and Auditors Commentary
The control is effective.
File:Greenlock.jpg
Status is acceptable.
Control Exception Commentary
Status is acceptable.
Remediation Plan
Remediation is not required at this time.