FINAL Report - Audit of IT Function1

AUDIT OF INFORMATION TECHNOLOGY FINAL REPORT Addressed to: Natural Sciences and Engineering Research Council of Canada (NSERC) Social Sciences and Humanities Research Council of Canada (SSHRC) Presented by: progestic international inc. 2650 Queensview, Suite 245 Ottawa, Ontario K2B 8H6 January 27, 2005 Audit of Information Technology January 27, 2005 TABLE OF CONTENTS 1 EXECUTIVE SUMMARY................................................................................................................................1 2 INTRODUCTION..............................................................................................................................................5 3 GOVERNANCE FRAMEWORK ....................................................................................................................6 3.1 GOVERNANCE STRUCTURE ..........................................................................................................................6 3.2 THE IT PLAN AND THE IT VISION.................................................................................................................7 3.3 RISK MANAGEMENT ..................................................................................................................................10 3.4 IT SECURITY PLAN......11 3.5 IT POLICIES AND STANDARDS............................................................................. ...