After completing check-out, your download will be available under MyISACA > Resources.
Take advantage of your membership and enjoy this FREE Member Preview! Not a member? Join now and enjoy this and many other benefits.
Maintaining operations in the face of incremental changes as well as sudden disruption is an enterprise-wide goal that is facilitated through business continuity programs. Given the requisite participation of all operational functions across the organization in these programs, IT audit has an opportunity to leverage its detailed knowledge of the enterprise’s applications and systems and business operations. To address the enterprise-wide nature of business continuity, these programs have several components such as governance, business impact analysis and communications. During the global pandemic, however, the scenario planning and testing component was particularly highlighted.
For those enterprises whose scenario planning included pandemics, did the scenario planning and testing prepare them adequately? If pandemics were omitted from scenario planning, how differently does scenario planning and testing look for those organizations going forward? To assist IT auditors in evaluating scenario planning and other components of business continuity programs, ISACA has written an IT Business Continuity/Disaster Recover Audit Program.
In addition to scenario planning, the audit program provides controls and testing in the areas of:
- Governance/Monitoring
- Business Impact Analysis
- Workforce
- Location
- Applications and Systems
- Emergency Preparedness/Communications
- Scenario Planning/DR Testing
- Continuous Improvement & Reports