Information Technology Reference
In-Depth Information
ments can also form part of the audit if the objective is to test whether the hardware
specifications meet the required processing requirements.
i) Storage Devices
There are various types of storage devices which are used to store data on our laptops,
tablets, and servers. All the terabytes of data generated by enterprises are held on
storage media. It is important that these storage devices are secured and data is pro-
tected. Enterprises go a long mile just to ensure that data is protected by providing a
correct environment for the storage devices.
Disk storage is a common and widely used storage media. Disk storage comes in various
sizes from as little as one gigabyte on a flash disk to huge disks which can store
millions of gigabytes of data. Disk storage uses magnetic material to store data and
wears off with usage. Exposure to hostile environments can also damage disks.
Tape storage is another type of storage media which is used to store data and commonly
used to store backup data. The use of tape storage devices have reduced as most en-
terprises are moving to disk media, which is more efficient in recording and reading
data.
IS auditors should ensure that storage devices are kept in secure places and appropriate
environments. Environment controls are very important in ensuring that the devices
can be used for a long time and are not easily damaged. Storage manufacturers re-
commend that storage devices should be replaced after a specified period of use, such
as a three years or less. Even if you loved your disk storage device, you will eventu-
ally be forced to replace it due to technological changes and advancement.
IS auditors will use audit objectives developed by management to assess various storage
devices in use in the enterprise. Management should ensure that storage devices are
properly secured and data is protected. Auditors will also be required to ensure that
performance of storage devices is according to recommended specifications. Storage
devices should not be a bottleneck in the accessing and processing of data. It is the
role of the IS auditor that management is advised appropriately on the best storage
technologies for the enterprise.
j) Database Systems
Database systems are used to store data captured using application systems or data col-
lected from other applications and databases. Database systems make the work of
data analysts easier as they are able to carry out complex data manipulation to pro-
Search WWH ::
Custom Search