Question PPPR-15
Do you have documented, and currently implemented, internal audit processes and procedures?
| Weight | 15 |
| High Risk | No |
| Required | Yes |
| Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
State plans to document and implement internal audit process and procedure in your environment.
Answering "YES"
Summarize your internal audit processes and procedures.
Reason for Question
The role of an internal auditor is to verify implemented controls and highlight areas in need of improvement. Vendors without internal audit processes and procedures should be met with scrutiny on how security policies and procedures are monitored and verified in their environment.
Follow-Up Inquiries
Follow-up inquiries for internal audit processes and procedures will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]