Embedded Files
Summary
Summary
I reviewed an IT manager's internal audit for Botium Toys by reviewing the scope, goal and risk assessment report. I also provided recommendations to enhance control and compliance best practices so that Botium Toys could guarantee business continuity and may avoid fines and penalties from governing bodies and keep a good reputation on the market.
Audit Process
Audit Process
Reviewed scope, goals, and risk assessment report.
Evaluated controls across administrative, technical, and physical categories.
Assessed compliance against PCI DSS, GDPR, and SOC standards.
Some Key Findings
Some Key Findings
Controls Gaps: Lack of least privilege policies, disaster recovery plans, and centralized password management.
Compliance Gaps: No encryption for credit card transactions or established breach notification plans.
Recommendations: Implement encryption, enforce GDPR-compliant privacy policies, and improve user access controls.
Deliverables
Deliverables
Controls and Compliance Checklist
Controls-and-compliance-checklist.docx
Page updated
Google Sites
Report abuse