Scribd
Upload
13 views4 pages

IT EnvironmentSVG - S2K

It environment

Uploaded by

carltondurrant
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
13 views4 pages

IT EnvironmentSVG - S2K

It environment

Uploaded by

carltondurrant
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 4

IT Environment - processes & information processing

IT Application – System2000

IT processes: manage access

1. Document the following with respect to managing access:

(a) Process to manage access rights and provide them to employees

An application user access form is submitted for Management approval. Once approved, the form is forwarded to
Group IT System Manager for update.

(b) Layer at which application users are authenticated

Network
Operating system
Application
Database
Other

(c) The complexity of the process to manage access rights.


Complex systems will have complex processes managed by IT department while a simple system may have only a
single individual with administrative access managing access rights.

The administrator updates the ERP with the user access detail.

(d) The complexity of the security over the IT environment


This includes the vulnerability of the IT environment to cyber risks particularly when there are web-based
transactions or transactions involving external interfaces. Complex systems will include multiple platforms with
web-based access and complex security models while a simple system will not have web-facing elements.

ERP is not web facing.

IT processes: manage program or IT environment changes

2. Document the following with respect to managing program or IT environment changes:

(a) Was the application implemented during the period?


Answering 'yes' activates the work program 'New system implementation or data conversion' in the Respond to
risks phase.

Yes
No

(b) Was there data conversion, other than new system implementation, during the period?
Answering 'yes' activates the work program 'New system implementation or data conversion' in the Respond to
risks phase.

Yes
No

(c) Do entity personnel have access to source code?

Yes
No

3. Were there changes in the IT environment?


Yes
No

4. Document the following with respect to managing program and IT environment changes:
(a) The process to manage changes, if applicable

Change requests are evaluated to determine feasibility. Approved changes are tested and if successful then applied.

(b) The extent of changes in the IT environment

For example, new aspects of the IT environment or significant changes in


the IT applications underlying the IT structure. In a less complex system,
changes may be limited to version upgrades of commercial software
whereas in a more complex system there may be new or a large number or
complex changes, several development cycles or heavy ERP
customization.

IT information processing

5. Document the following with respect to IT information processing:

(a) Process over IT operations


The extent of automated procedures for processing and the complexity of those procedures, including whether
there is highly automated, paperless processing.

ERP supports automated processing.

(b) Communication within the IT environment (between applications, databases etc.)


Complex systems will have a large number of data inputs or complex interfaces between one another than transfer
data through the IT environment. Non-complex systems will not have automated data interfaces and may rely on
manual inputs into systems.

Interfaces are also used to input data between applications and databases.

(c) Extent of automated processing (batch) and the complexity


Complex systems will have extensive use of automated procedures that are often complex and paperless while
non-complex systems will rely on manual intervention for processing. Batch processing is when a series of jobs are
executed in an application without manual intervention.

The ERP does batch processing.

(d) Reliance on system-generated reports in information processing


Complex systems will have automated report logic and may use report-write software while non-complex systems
will use simple report logic.

ERP has the ability to generate complex reports.

(e) Data input into the IT application


Complex systems may have a large number of data inputs which can include customer or vendor input or complex
interfaces while non-complex systems may have simple manual inputs.

ERP supports interfaces with large data input for processing.

(f) Volume and complexity of data processed


The volume and complexity of data may include whether accounting records or other information are stored in
digital form and the location of the stored data. Complex systems will have large volumes of data or complex data
stored in data warehouses potentially by IT service providers, while simple systems have low volumes of data that
is simple and easily verified manually.
Data processed in the ERP are stored within DB2 on application server and can be verified.

(g) The level of customization


Level of customization refers to how much the entity may have modified the IT application. Some IT applications
may be used with any changes made to the application developed by a third-party, while other IT applications may
have modifications or adjustments.

In keeping with changes to business process and requirements there were minimal modification done to the
software.

You might also like