Minor Hotel Group Annual IT Audit 2015

IT Internal Compliance Weight

Audit Area score Remarks Guidelines
Controls (Y/N) %

1 Updated IT Organization Chart on place(Yearly) Y 2.50 2.50 Update IT team name position and reporting lines
2 Updated IT staff roles and responsibility documents(Yearly) Y 2.50 2.50 Maintain Job Description approved by Human Resources Department
3 Updated Hotel Network Diagram / Wifi Diagram(Yearly) Y 2.50 2.50 Updated Network diagram of Admin & Guest
4 Updated Hotel Hardware Information(Yearly) Y 2.50 2.50 Maintain hardware specification and inventory
5 2015 New User Request Forms system (AD/Email , Opera , Micros , Sun and etc..) Y 2.50 2.50 Requested in IT Access form sign by Associat in to approve by Line Manager and FC then keep in file
6 2015 Resigned/Terminated Employees Action Forms- IT Access(Monthly) Y 2.50 2.50 Request in IT Access form sign by Associate > HOD > HR > FC > IT and keep in file
7 User Access Audit(Quaterly) Y 2.50 2.50 Print/PDF the active users with permission  in the system send to FC to reviews and sign every 3 months
8 Updated System Admin Password keep in the FC Safe(Quaterly) Y 5.00 5.00 Update all system Admin passwords in sealed envelope signed by IT & FC
9 Software License Keep in File (Yearly) Y 2.50 2.50 Maintain all software licenses agreements e.g Microsoft, Symantec, Adobe
10 Computer room Access Log (Monthly) Y 2.50 2.50 Maintain log book for server room entry & exist
11 Backup Tape in the Fire proof Safe(Weekly) Y 5.00 5.00 Store daily/weekly/monthly/yearly data backup in the fire proof safe in secured location
12 Restore data from the backup into the Test Server (Quatertly) Y 5.00 5.00 Backup user file/folder and delete, restore from backup with screenshot.
13 Antivirus definition Update Verification/Check (Monthly) Y 5.00 5.00 Verify Antivirus definition releases and refer antivirus website
14 Windows patch update(Monthly) Y 5.00 5.00 Verify Microsoft OS update releases and refer website
15 Monitor check disk space available on all server(Monthly) Y 2.50 2.50 Verify critical all servers physical disk space
16 Monitor check table space Opera database(Monthly) Y 2.50 2.50 Verify Opera server table space
17 Wifi signal report testing on nb, ipad, smart phones in guest room(Quaterly) Y 5.00 5.00 Check Wifi coverage in Public areas & Guest rooms
18 Disaster Recovery exercise on critical server (Yearly) Y 5.00 5.00 Yearly once shutdown critical applications for 6 hrs (approved by GM/HM & FC only), reviews update procedure
19 Updated Backup (image)System State(Yearly) Y 5.00 5.00 Create and maintain Systemstate backups for servers
20 FM200 Fire Suppression in server preventive maintance (Quarterly) N 2.50 0.00 Input from Engineering Department schedule/check report
21 Updated Vendor Contact Information(Yearly) Y 2.50 2.50 Maintain vendor contacts of each systems and IT services
22 Backup Inventory(Monthy) Y 2.50 2.50 Maintain Backup inventory of backup disks and label
23 Year End Backup (Yearly) Y 5.00 5.00 Maintain Year End Backup two copies and strore in secured place
24 Offsite Backup Storage (Monthly) Y 5.00 5.00 Store monthly backup copies outside property in a sealed package (nearby sister hotel or city office)
25 Change Management Form Backup (Yearly) N 5.00 0.00 Maintain records related to critical changes Network, Systems and Security
26 Document processes to ensure training is provided to IT employees and is recorded Y 2.50 2.50 The proper IT Training knowledge to Super Users or key employee concern department
27 Change Management process, verify the approval and tracking of any appications changes. N 2.50 0.00 To proper records the change process , ensure to passed UAT before Roll out to Production (Applications)
28 Server audit logging, methods use to review audit logs (Monthly) N 2.50 0.00 Verfify to ensure to reviews the Server Audit Log
29 IT Risk Register – Review register monthly and track items (Monthly) N 2.50 0.00 To alert and aware in the proper control of the IT Risk management (Internet Bandwidth,bakup failure,etc.)
Total Score: 85.00
Additional
Notes:
1
2
 Brand
Brand Standard Target Remarks
Standards

1 Client Computer Brand / Model

2 Server Computer Brand / Model
3 Windows OS, Windows 7 , Windows 8
4 Microsoft Office 2013
5 E-Mail Office 2013 , Outlook 365
6 PMS , Opera
7 POS , Micros
8 Internet Compliance where possible wifi signal -65dbm ( cost)
9 Guest Internet GSS

............................. ............................. ............................. ............................

IT Manager Financial Controller General Manager Director IT

Daily Checklist Form

Document

Weekly Checklist Form

Document

Monthly Checklist Form

Document

Quarterly Checklist Form

Document

Annual Checklist Form

Document

Template - Contingency Plan

Document
Y
N