Assurance

["Dunker, Mary" <>]

Virginia Tech started with a gap analysis, using ideas from UC Davis, that 
included:

Action item for IAP Section where a gap exists
Responsible unit
Type of work required (documentation, infrastructure change, procedure or 
policy change)
Effort (major, moderate, minor)

We found this approach very helpful.
Mary


-----------------------------------------------------------------
Mary Dunker
Director, Secure Enterprise Technology Initiatives
Virginia Tech Information Technology
1700 Pratt Drive
Blacksburg, VA 24060
540-231-9327

 
--------------------------------------------------------------------


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Russell J Yount
Sent: Thursday, May 17, 2012 9:10 AM
To: 

Subject: [Assurance] Other Tools?

The development of management statements about Silver compliance for an 
Auditor to review is addressed by Silver+Assessment+Report+Template-DRAFT in 
wiki.

Are there any tools people are using in the initial review of an 
institution’s infrastructure to document areas of non-compliance and assist 
the development of plans to bring an area into compliance?

-Russ