Today, my manager and I arrived at our client's location 10 minutes early and entered together with the auditor team. Just as we were about to start fieldwork, I received an email from yesterday's auditor containing revised general ledgers, prompting me to rerun some tests.
During our audit of today's company, we discovered that although they have an active directory, it is not applied to all workstations, and some passwords are left by default. As part of our audit, we explained to the client what an active directory is and why it's important for managing and authenticating user access to network resources.
One of the audit findings we raised was the company's non-compliance with suggested password practices. My manager asked me to present the audit findings to him, explaining the risks associated with each point. He then asked me to present these findings to the client.
After the presentation, we returned to our hostel to rest.
Main things that have learnt:
To learn what is Active Directory
To present audit findings to clients in an effective way
Comment/idea/opinion
N/A
Comments