The audit/assurance program is a tool and template to be used as a road map for the completion of a specific assurance process. Oxley Technologies Inc has commissioned audit/assurance programs to be developed for use by IT audit and assurance professionals with the requisite knowledge of the subject matter under review.
The information security management audit/assurance review will:
• Provide management with an assessment of the effectiveness of the information security management function.
• Evaluate the scope of the information security management organization and determine whether essential security functions are being addressed effectively.
• Compliance with ISO 270001:2013 Information Security Management System (ISMS) requirement.
It is not designed to replace or focus on audits that provide assurance of specific configurations or operational processes.