Peer-Driven Insights

Auditing & Logging

Active Ambassadors in This Topic

Gary Burmiston

E.ON

Energy and Utilities, 10k+

Martin Jung

Premera Blue Cross

Healthcare and Biotech, 1k - 5k

Vincent Bryan

Travelers

Insurance (except health), 10k+

View All Community Ambassadors

Community Posts

If you had to upgrade to Windows 11 manually, how long do you estimate it would take your team to complete the following capability check for: TPM (trusted platform module)

0 - 15 mins20%

15 - 30 mins64%

30 - 45 mins23%

+45 mins7%

View Results

The Cyber Resilience Act is here. How is your company currently affected by the launch of the Cyber Resilience Act?

We’ve made already significant changes to comply.42%

We’re in the process of assessing the impact.42%

We’re not affected.17%

View Results

I'm currently getting the materials ready for our SLT audit strategy workshop scheduled for late June. As part of this, I'm reviewing the preparation pack and would greatly appreciate your insights on a few key areas:
Future Skills for Auditors: What skills do you see as most critical for auditors to possess to be successful in the future?
High-Performing Internal Audit Function: In your opinion, what are the essential components that define a highly effective internal audit function?
High-Performing Audit Team Culture: What defining characteristics are typically found in a successful audit team culture?
Emerging Audit Topics: What are the key emerging topics that you believe audit functions should be prioritizing in their planning?
Beyond Assurance: What activities beyond traditional assurance work are high-performing audit functions actively involved in?

Read More Comments

Is a comprehensive IT audit permanently on your checklist when stepping into a new CIO position? If not, what on your checklist is etched in stone?

Read More Comments

How does your Internal Audit department handle assigning resources for continuous improvement initiatives (i.e. giving input on system or tool improvements; building a training program, etc)? We handle this as goal work and team members are assigned to working teams on top of their regular audit work.

Read More Comments

Do you have any recommendations for an audit firm to evaluate general controls for retail POS? Why are they your choices?

We are on a journey to move from distributed disjointed monitoring and alerting by each silo to an enterprise observability approach. We use SNOWas our CMDB also have Splunk for logging. If you've been down this road, what advice can you give?

Read More Comments

The internal audit department of the Port of Antwerp-Bruges uses Caseware Idea as a audit analytics solution. We are searching for peer insights about usability, pro and cons, evaluation against other audit analytics tooling. Can anyone share some insights about this specific tool or about audit analytics tooling in general?

What best practices for asset management should organizations use to minimize audit risks?

Read More Comments

Are you facing the same cost increase / risk on the timeline for the PCI DSS 2024 Audits?

What is a ballpark annual price per endpoint for managed security services?

I'm seeking advice regarding a strategy for handling inactive accounts within directories. An auditor has requested a report on enabled accounts that haven't been logged in for over 90 days. While there are various approaches to solve this, I'm uncertain about the appropriate platform. Should this fall under the realm of a log/reporting, making it suitable for a SIEM solution (consolidating logs to generate a report)? Or does it delve deeper into an IAM concern (analyzing user accounts for inactivity and taking action)? Has anyone encountered a similar reporting or compliance scenario? I'm in search of guidance to make an informed decision on whether to approach this from a reporting angle or a more comprehensive IAM perspective. Your insights could serve as a deciding factor/tiebreaker to help me choose the most strategic path to address this scenario.

What call detail record (CDR) reporting solution is your organization using?

Imagicle Call Analytics12%

ISI Infortel Select40%

Variphy Call Analytics and Reporting23%

Self-developed Solution13%

Other6%

We do not need/use CDR reporting6%

View Results

We are carrying out a migration implementation from Sap R3 to HANA, the process that is carried out by SAP requires extensive permits (sap*) for several Sap consultants and for an extended period of time (10 days), our compliance and audit department are objecting to these broad permissions, have you had this experience? What alternative controls have you implemented in these cases? We are analyzing several alternatives but some real experience would be useful if someone has solved it.

What's your experience of event-based retention in the cloud? Any issues to watch out for?

Read More Comments

What log management tool do you use and would you recommend it?