The Configuration Manager must schedule the technology configuration audits as planned. A technology configuration
audit should be conducted to ensure conformity between the documented baselines and the actual business environment to
which they refer. It focuses on reviewing the integrity of Configuration Management Database and the actual technical
configuration environment. It verifies the physical existence of technology configuration items in the organization, to
check that the records in the configuration management system match the physical infrastructure.Technology
configuration audits are generally conducted by members, who are external to the engagement.
The technology configuration audits generally cover:
-
Functional Configuration Audit (FCA): This type of audit verifies that the control of specific technology
configuration items and their attributes are in alignment with the expected status of the technology configuration
items
-
Physical Configuration Audit (PCA): Verifying that all technology configuration items expected to be under
configuration management are indeed under control. The technology configuration items stored in the CMDB should
match the technology configuration items from the various data sources.
Technology assets should be audited to highlight the inconsistencies and discrepancies in the asset database, procedure
followed for modification of assets, and its documentation.
|