The Australian Signals Directorate (ASD) has developed a list of 35 strategies to mitigate targeted cyber intrusions. The list is based on ASD's experience in operational cyber security, including responding to serious cyber incidents and performing vulnerability assessments and penetration testing for Australian government agencies.
Wireless networks use radio waves to transmit data to wireless-enabled devices such as laptops, tablets and phones. This wireless technology enables users and systems to remotely access organisational data and resources without being physically connected to a cable in an office. Wireless security aims to prevent unauthorised access to systems using wireless networks.
This Part provides a high-level analysis of the findings from our 2015–16 information technology (IT) general controls audits, analysed by:
When planning a financial audit, our auditing standards require that we understand and evaluate an entity's information technology (IT) environment and any risks arising from this that relate to the reliability of financial reporting.
During the audit we may then test the effectiveness of selected IT controls to determine whether they are operating as the entity's management intended and are effectively mitigating risk.
This report is in its third year and builds on last year's Financial Systems Controls Report: Information Technology 2014–15. In this report we provide a high-level overview of the strength of information technology (IT) controls that operate across a number of entities to protect their financial information.
Ordered to be published
VICTORIAN GOVERNMENT PRINTER November 2016
PP No 218, Session 2014–16
Dear Presiding Officers
In accordance with section 16(3) of the Audit Act 1994, a copy of this report, or part of this report, was provided to the Department of Economic Development, Jobs, Transport & Resources, the Department of Education & Training, the Department of Environment, Land, Water & Planning, the Department of Health & Human Services, the Department of Justice & Regulation, the Department of Premier & Cabinet, the Department of Treasury & Finance and Victoria Police.
Figure A1
Key 2003 and 2016 Standing Directions requirements for audit committees
Category |
2003 Standing Directions |
2016 Standing Directions |
|---|---|---|
Role |
Where significant risks have been identified through audits and agencies have committed to addressing those risks through proposed actions, it is important that actions are completed in a timely manner and in a way that fully addresses the underlying issues. If not, the agency could be exposed to risk.
Audit committees have a key role in monitoring agencies' implementation of agreed actions agreed in response to internal and external audits.