Outsourcing guide released by ISACA

ISACA has created a new audit program, designed to help decision-makers with outsourcing their relationships.

Outsourcing can be more cost efficient, as well as enabling businesses to tap into specialised resources.

The audit provides guidance on vendor selection, onboarding and ensuring that appropriate controls are in place.

ISACA’s Outsourced IT Audit Program also includes:

• governance and risk assessment processes, plus cost benefit analysis, prior to initiating an outsourcing IT model;
• internal controls and requirements for the selection process of an outsourced IT vendor;
• appropriate steps to manage the transition from in-house to outsourced providers of IT services;
• key monitoring and quantitative controls of the service delivery from the outsourced IT provider.

“The volume of technology-driven challenges and responsibilities can be overwhelming for many organisations in this era of digital disruption,” said Christos Dimitriadis, chair of ISACA’s board of directors and group director of information security for INTRALOT.

“The guidance provided in this audit program will help enterprises make strategic decisions about outsourcing IT services that will position them for success and allow them to place greater focus on their core capabilities.”

Guidance put forth as part of the vendor selection process includes detailing steps needed to make sure the vendor complies with clients’ regulatory requirements, the vendor is an industry leader in the IT outsourcing space, the vendor has established a business continuity plan, the codes of conduct between the client and the vendor are aligned, and contract terms are appropriate.

ISACA audit programs have been developed and reviewed by leading audit and assurance professionals worldwide. They can be downloaded to allow customisation that fits varying work environments.

The Outsourced IT Audit Program is available for purchase at a reduced rate for ISACA members.

Image credit: ©iStockphoto.com/TommL

Follow us on Twitter and Facebook