module 04

Periodic Employee / VPN access audit

Auditor Information

Date Audit Completed: May 1st, 2020

Audit Conducted By: Randall Harrell

Detail any exceptions found, and remediation processes: Compared the AD and HR list utilizing the excel function called “VLOOKUP”. This excel function allowed the computer to compare a set value against a vertical list of data.

Control Monitoring

CC5.5-4 Periodically, the IT Security Analyst compares the current employee listing from the payroll system to active employees in the XYZ Technology Active Directory system to ensure that any existing employees have system access disabled within 24 hours of termination.

CC5.6-6 Periodically, the IT Security Analyst compares the current employee listing from the payroll to employees with VPN access.

Number of Enabled Active Directory Accounts: 29

Number of Active Employees Based on Employee Census Report: 27

Difference of Enabled Accounts from Employee Census: 2

In the space below, detail what is known by the data why these two numbers do not match, and include details of the Employee Names or Active Directory Account Names:

There are 2 accounts, Zare Leonis and Gail Trayvis. Both accounts are active and should not be. Both employees have been terminated and account should’ve been disabled.

This study source was downloaded by 100000762646252 from CourseHero.com on 01-28-2022 17:54:33 GMT -06:00

https://www.coursehero.com/file/61723065/CIS3240C-Mod4-Part-1docx/ Powered by TCPDF (www.tcpdf.org)