Information Technology Review - Auditing Information Systems: Enhancing Performance of the Enterprise - page 40

Workstations are operated and controlled by operating system software such as Win-
dows, Android, iOS, Linux, BlackBerry, and Ubuntu. Operating system software are
powerful systems not only found on computers but on all computing devices, includ-
ing modern devices which we use in our everyday life such as cameras, smartphones,
wearable devices such as smart glasses and wristwatches. Operating systems perform
various functions on workstations and facilitate the use of application systems, such
as office productivity tools. Operating systems are also used to enable communica-
tion with other computers on networks and the Internet.
In order to ensure that operating systems operate as expected, they should be properly
configured and meet workstation configuration standards as determined by the enter-
prise. The IS audit team can use a compliance checklist to test whether the worksta-
tion operating system meets the required workstation configuration standards.
Auditing operating systems provides us with an assurance that the computers being used
provide a secure environment. IS auditors should review various aspects of the oper-
ating system, which include the following audit objectives:
1. all ports not in use should be closed
2. workstation wireless adapters should be disabled on sensitive segments
of the network
3. only latest versions of operating system should be installed on worksta-
tions
4. operating systems should be security hardened on all workstations.
An audit may specifically focus on auditing an operating system only instead of all soft-
ware on the workstation. In this case, the IS audit team might look at specific audit
objectives relating to the operating system. There are various types of operating sys-
tems and operating on different devices. The focus of a particular operating system
audit will depend on business and usage requirements.
c) Application Systems
Application systems have been included on the list of technologies because they are
commonly used in office environments to process data and generate information.
Application systems are also used to carry out specific functions. Common uses in
enterprises include automation of customer relations management, human resources,
finance, and procurement. These application systems can be used as stand-alone ap-
plication system or integrated with other office systems.