Task: Plan And Conduct Technology Asset And Configuration Audit
The Configuration Manager must ensure that technology asset and configuration audits are conducted as planned by auditors external to the team.
Relationships
Main Description

The Configuration Manager must schedule the technology configuration audits as planned. A technology configuration audit should be conducted to ensure conformity between the documented baselines and the actual business environment to which they refer. It focuses on reviewing the integrity of Configuration Management Database and the actual technical configuration environment. It verifies the physical existence of technology configuration items in the organization, to check that the records in the configuration management system match the physical infrastructure.Technology configuration audits are generally conducted by members, who are external to the engagement.

The technology configuration audits generally cover:

  • Functional Configuration Audit (FCA): This type of audit verifies that the control of specific technology configuration items and their attributes are in alignment with the expected status of the technology configuration items
  • Physical Configuration Audit (PCA): Verifying that all technology configuration items expected to be under configuration management are indeed under control. The technology configuration items stored in the CMDB should match the technology configuration items from the various data sources.

Technology assets should be audited to highlight the inconsistencies and discrepancies in the asset database, procedure followed for modification of assets, and its documentation.

More Information