Day 47 (23 Dec)

Today I focus on completing the remaining part of Accurus Scientific. I try to complete the last section by today, which is the computer operations that included the automated job processing, backup procedure, antivirus, and incident management procedures. For the part of automated job processing, we know that the company does not practice any of it, so I skipped that part. For the section on backup procedures, I inspected the screenshot of the system setting for the backup schedule and found that it was configured and scheduled accordingly. Then I inspected the backup logs and noted that all backups are done according to the backup procedure, the backup logs also contain the items like task name, result, start time, end time, duration taken for the backup, storage location, job type, job status, and percent of completion. Lastly, for the backup section, I inspected the offsite backup transfer log and noted that it was performed once every three days, and the result is shown to indicate whether the process is successful or not.

For the next section, patch management, and antivirus, I inspected the sample Windows update history of the server hosting the application and found that patches were successfully updated and installed. Besides, I inspected the antivirus sample and noted that it is active and up-to-date. For the last section, which is the incident and problem management procedures, I inspected the samples of email communication between the requestor and IT department, The email communication displays the problem users are facing, however, it does not display information like whether the reported incident has been followed up or resolved.

---

Main things that have learned

-Completed the Audit Working Paper for Accurus Scientific and started to draft the

Management Letter for it.

---

Comment/idea/opinion

• N/A