This audit work program sample outlines steps to take for testing the effectiveness of an organization’s network access and infrastructure.
Sample steps include: determine if adequate segregation of duties exists among job functions in user-access controls and physical job functions, obtain the department's disaster recovery manual, verify that a contingency plan has been identified, verify that the emergency contact numbers have been updated periodically, and verify that the department staff is aware of the business continuity plan and what procedures to follow during a service disruption.