221 What We Missed at the Data Centre Audit

No ratings

Presented at EuroCAS 2014 by

After completing this session, you will be able to: • Know the real risks and the resulting incidents that are materialising at almost all outsourced data centres. Most audits are focusing on the wrong risks and IT managers aren’t controlling some fundamental processes. • Understand the causes of likely data centre risks. The controls that are missing are often easy to check and implement yet are being completely overlooked. • Discuss why these weaknesses are not being spotted. Too many auditors at data centres are not IT professionals or don’t understand how to manage the outsourced data centre. Reliance on third party reports doesn’t cut it! • Carry out a structured review that will identify costs savings and control weaknesses in a vastly more effective audit aligned to ISO27001 principles. • Recommend a course of action based on realistic appraisals of the risks, outcomes, controls and management actions required to resolve these issues.