Hello ACUA Community -
Two new audit topics have come out our risk assessment this year are Research Security and Software Licensing, for which we are slated to perform audits of later this year. I work for the CSU Chancellor's Office, traditionally our campuses have been R2 and R3 universities, however one our campuses recently achieved R1 status. We are planning to a conduct information security and compliance type audits at our research heavy institutions. Top of mind would be looking into research computing environments and compliance with grant contracts. Has anyone conducted similar audits? Any thoughts, ideas, tips are appreciated. If anyone is comfortable to share an audit program that would we wonderful.
Our other topic is around software licensing as we'd like to understand how effectively our campuses are tracking software license compliance. If anyone has conducted a similar audit and has some guidance or audit programs that would be great.
Thanks in advance!
------------------------------
Clement Chen | Senior IT Auditor | California State University
|
clchen@calstate.edu------------------------------