Documents
Resources
Learning Center
Upload
Plans & pricing Sign in
Sign Out

Data Warehouse Environment - AuditNet

VIEWS: 0 PAGES: 21

									                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G

   A.      Planning and Administration
   B.      Data Warehouse Environment
   C.      Test of Data Warehouse Reports
   D.      Disaster Recovery
   E.      Change Management
   F.      File Retention and Recovery
   G.      Security
   R.      Audit Reporting




02/10/13                  Page 1                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G


                                                                                            Status      Ref

   A.      Planning and Administration
           Objective: To obtain an understanding of the information technology
           and systems collectively called the Data Warehouse.
           Objective: To gain an understanding of the technical architecture of
           the Data Warehouse
   A-1     Obtain information on the nature of data warehouses and approaches
           to auditing for data quality (reliability).

   A-2     Request preliminary information on the company’s Data Warehouse.
           Information should include operational and business purposes as well
           as applications and technical architecture components.

   A-3     Based upon analysis of preliminary interviews, identify the timing,
           scope, and objectives of the audit and document in a planning memo.
           Include specific discussion on what is out of scope of this review (e.g.
           SAP BW). A primary objective in writing the planning memo is to
           identify and document related risks.

   A-4     Develop the Audit Program based on information obtained above

   A-5     Prepare a list of requested information.

   A-6     Arrange for an audit kick off meeting and document results in a
           memo. Follow up with written announcement of engagement and
           forward to appropriate management, if necessary.

   A-7     Identify key contacts for the audit.

   A-8     Define deliverables with Vice President of Internal Audit.

   A-9     Develop Control Questionnaires for each data warehouse component
            Data Source (Systems)
            Data Extractors, Load and Transformation
            Data Warehouse Repository
            Meta Data
            Decision Support System Engine
            Decision Support System Application
            End User Interface/Personal productivity Applications tool(s)
02/10/13                  Page 2                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G

                                                                                            Status      Ref



   B.      Data Warehouse Environment
           Objective: To gain an understanding of manner in the Data
           Warehouse is used to support organization’s business objectives.
           Objective: To gain an understanding of the organizational structure
           including roles and responsibilities of key IS staff and the business
           process owners of the Data Warehouse

   B-1     Obtain an understanding of any representations made about the data
           warehouse in the 10Q

   B-2     Based on information above, meet with members of management to
           select a sample of Data Warehouse reports used to support key
           management decisions.
            LOB 1
            LOB 2
            LOB 3

   B-3     Keeping in mind the population of reports selected in B-2, obtain an
           understanding of who is responsible for recurring activities for the
           data warehouse reports. Include:
            Source data management
            Data extraction, load and transformation
            Database Administration of Data Warehouse Repository
            Seagate Info/Crystal Enterprises
            Report Server including scheduling of Instances
            Data Warehouse client (Web browser, Excel or Crystal)


   B-4     Also inquire who is responsible for
           Project Based Activities
            New development and enhancements including reports and
              databases
            End User Training
            Report Retirements

   B-5     Obtain an understanding of general processes used by the Data
           Warehouse to obtain data. Document your understanding including
02/10/13                  Page 3                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G

                                                                                            Status      Ref

           the following areas:
            Data pulled into Informatica
            Data received in flat files
            Data maintained by generic data interface process
            Other

   B-6     Obtain an understanding of the functions managed with Seagate Info
           and Crystal Enterprise.

   B-7     Based on roles and responsibilities identified in step B-3, complete the
           Control Questionnaires developed in step A-9

   C.      Test of Data Warehouse Reports
           Objective: To determine the data reliability controls surrounding data
           warehouse processing and reports
   C-1     Sample Information
           For each item in the sample in B-2, document using a standard
           template the report specific details and application components. .

   C-2     Identification of Control Activities related to Data
           Considering the sample of reports in step B-2, identify data reliability
           controls between the source data, data warehouse repository, and
           report definition. Document related data validation control activities
           at each step.

   C-3     Controls over Source System Data
           For items in the sample of reports in step B-2, obtain specifics on data
           origination for all sources used to populate data warehouse tables that
           are components of the sample reports. Specific information should
           include details on:
            Source of data (e.g. system interface, user input)
            Frequency of update from source system (e.g. daily, monthly)
            Timing of updates
            Controls to ensure completeness, accuracy, and timeliness of
               source data.
           Review this information and make a determination if process
           promotes data reliability.

   C-4     Identification of Control Activities related to Reports
02/10/13                  Page 4                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G

                                                                                            Status      Ref

           Considering the sample of reports in step B-2, identify controls related
           to report templates and report instances. Document related control
           activities.

   C-5     Report Definitions and Stored Procedures
           For items in the sample of reports in step B-2, obtain and review the
           report definitions and related stored procedures and perform the
           following:
            Relate the report definitions back to specific tables to validate the
               correctness of the information provided on the standard template
            Conclude on whether or not the report following the Data
               Warehouse Naming convention

   C-6     Report Scheduling and Report Instances
           For items in the sample of reports in step B-2, obtain specifics on
           report instances:
            Scheduled
            Creation of instances
            Number of instances retained and related time frame (for step F-1)
           Based on control activities identified above, design an audit test to test
           that report instances are being created as scheduled.

   C-7     Report Meta Data
           For items in the sample of reports in step B-2, obtain the Meta Data
           from the Report Documentation database.
            Review the Meta Data to see if it complete and reasonably reflects
              the report in production
            Also obtain an understanding of what users (if any) have the rights
              to update the User Portion of this documentation.


   C-8     Report Instance Validation Process
           For items in the sample of reports in step B-2, meet with end user
           management and obtain an understanding of their process to validate
           that the report instance created from the Data Warehouse ties to the
           underlying source system.

   D.      Disaster Recovery
           Objective: To obtain an understanding of the disaster recovery plans

02/10/13                  Page 5                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G

                                                                                            Status      Ref

           for the Data Warehouse
   D-1     Obtain and review the disaster recovery plan for the Data Warehouse.
           Make a determination if the plan is current and complete based.

   D-2     Review the disaster recovery related questions in the Control
           Questionnaires. Document related issues and related potential audit
           comments, if any.

   E.      Change Management
           Objective: To obtain an understanding of the change management
           processes used in the Data Warehouse
   E-1     For items in the sample of reports in step B-4, obtain specifics on
           which elements are controlled via Change Management processes

   E-2     Review the change management related questions in the Control
           Questionnaires. Document related issues and related potential audit
           comments, if any.

   F.      File Retention and Recovery
           Objective: To obtain an understanding the file retention and recovery
           processes for reports and data in the Data Warehouse
   F-1     For items in the sample of reports in step B-4, obtain specifics on how
           report instances and report templates are managed for file retention
           and recovery. Determine if retention is appropriate based on user
           requirements.

   G.      Security
   G-1     Obtain an understanding of segregation of duties issues previously
           identified in the Data Warehouse Security project have been resolved.

   G-2     For items in the sample of reports in step B-4, obtain specifics access
           rights to these reports. Validate this access is appropriate with end
           user management.

   R.      Audit Reporting

   R-1     Prepare a listing of potential audit comments. Discuss on an on-going
           basis.


02/10/13                  Page 6                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                             Data Warehouse – Data Reliability Process Review

                                          Audit Program
                                Contributed by melissaperrycpa@yahoo.com
                Questionnaires based on work of Data Warehouse Components – by Volkan Pekince
     Approach based on notions in the GAO Publication - Assessing the Reliability of Computer-Processed Data, GAO 03-273G

                                                                                            Status      Ref

   R-2     Prior to audit closing meeting, prepare a document for a group
           discussion.

   R-3     Prepare an Audit Summary. Send corresponding request to IS
           Management for proposed corrective actions.

   R-4     Prepare an Executive Summary incorporating corrective actions for
           issuance to auditees, senior management and the Audit & Compliance
           Committee of the Board of Directors.




02/10/13                  Page 7                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                      Data Warehouse Data Reliability Review
                                                   Questions for Sample of Data Warehouse Reports


                                                                            Yes/   WP
                                                                            No/    Ref                                    Comments
                                                                            NA
A. DATA SOURCE SYSTEM QUESTIONS
Definition: Data source system in this context is used to describe any data source including operational systems, files received via diskette or via input in generic
user interface.
Please answer for Each Data Source (System) related to the Sample of Reports
1. Notification
    Is there a process, procedures, or mechanisms that notify all
     responsible Data Warehouse managers when operational system
     changes occur?
    If so, please describe including the responsible party for
     notification.
2. Data Compatibility
   and Conditioning
   Considerations
    Describe how the warehouse is (was) reconciled to the source
     system during the development process to address data
     compatibility and data conditioning.
3. Periodic Review
    Is there a process to periodically review that the selection of data
     extracted from the operational system to ensure it is complete
     and accurate list?
    If so, please describe including the level of involvement from
     system users.
4. Data Management
    Is data managed data from disparate systems to ensure it is
     reconciled and conditioned to ensure referential integrity?
    Please describe
    Is there a process to translate the different meanings of data
     across operational systems to a common definition in the
     warehouse?
    If so, please describe
5.   Data Reengineering




02/10/13                     Page 8                              dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                     Data Warehouse Data Reliability Review
                                                  Questions for Sample of Data Warehouse Reports


                                                                         Yes/    WP
                                                                         No/     Ref                       Comments
                                                                         NA
A. DATA SOURCE SYSTEM QUESTIONS
   Has data been reengineered as a means to automate the
    investigation, standardization, and integration of actual data
    values from the source system(s)?
   If so, please describe.




02/10/13                    Page 9                              dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                      Data Warehouse Data Reliability Review
                                                   Questions for Sample of Data Warehouse Reports



                                                                           Yes/    WP
                                                                           No/     Ref                                 Comments
                                                                           NA
                                                                                                                 B. DATA EXTRACTOR QUESTIONS
Definition: The links between the operational systems and the relational Data Warehouse are called Data Extractors. They are the control points that contain the
means and methodologies for extracting the required underlying data from the operational systems and transforming the data into cross-functional, integrated
integrate corporate information on the warehouse. Transformation programs can be written to extract, filter, condense, and/or restructure data.
Please answer for Each Data Extraction Process impacting the reports in the Sample
1. Notification
As operational systems and the Data Warehouse change, the
extractors should change accordingly.
 Is there a defined process to enable proper notification of all
     system managers in the event of change? Please describe.
2. Change Management
Transformation programs or algorithms should follow the same
change management process as other production programs.
 Is a formal change management process used?
 Please describe the change management process used.
3. Data Validation
   Is extracted data compared back to the operational systems to
    ensure completeness and accuracy?
   In this instance, is data validated by field? If so, is validation
    based on data types or specific values?
   Please describe.
4. Extraction Timing
   and Control
   Do extractors run on schedule?
   Are there controls to ensure that prerequisite work for the
    extractor has been completed and that correct versions of files
    are being input?
   Please describe
5. Dirty Data
   If the extraction process encounters problems, does the




02/10/13                     Page 10                              dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                     Data Warehouse Data Reliability Review
                                                  Questions for Sample of Data Warehouse Reports


                                                                         Yes/    WP
                                                                         No/     Ref                          Comments
                                                                         NA
                                                                                                           B. DATA EXTRACTOR QUESTIONS
    extraction process allow for dirty data?
   If dirty data is allowed to populate to the warehouse, is there a
    mechanism designed to notify users of the problem and the
    effect it will have on their data?
   Please describe.
6. Access to Extraction
   Programs
Access to extraction programs should be limited to authorized
personnel.
 Is access to extraction programs controlled?
 Please describe
 Who are the authorized personnel with rights to these programs?
7. Modification of
   Extraction Programs
Changes to extraction programs should performed by authorized
personnel, and be consistent with user and database requirements.
 Are changes to extraction programs performed by authorized
    personnel?
 List the authorized personnel.
 How are changes controlled to ensure consistency with user and
    database requirements?
8. Process Recovery
Extraction processes should be recoverable in the event of a process
interruption.
 Are you made aware of interruptions in the extraction process?
     Please describe.
 Describe the recovery process for interruptions. Please provide
     examples of common interruptions.




02/10/13                    Page 11                             dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                  Data Warehouse Data Reliability Review
                                               Questions for Sample of Data Warehouse Reports



                                                                       Yes/     WP
                                                                       No/      Ref                                 Comments
                                                                       NA
C. REPOSITORY COMPONENT QUESTIONS
Definition: The repository means the actual data repository. This is a relational database management system (RDBMS) that supports distributed databases.
Assumption 1: Users in this environment can access data elements, this necessitates access controls to specific data elements.
Assumption 2: The warehouse, the application programs no longer access data or perform data management functions directly; rather, the warehouse RDBMS
acts as the interface to the DSS engine and DSS application. This access mechanism is the technique that enables control of data independence, sharing, and
manipulation.
Please answer for Each Data Repository related to Reports in Sample
1. Notification
Procedures or mechanisms should be established to notify all
responsible Data Warehouse managers when operational system
changes occur.
 Is there a formal notification process?
 Please describe this process.
2. User Access
User access capabilities should be established.
 Have user access capabilities been formally established?
 How is access controlled?
 Who are the users?
 Approximately how many users are there?
3. Data Continuity
Controls should be in place to ensure that the data in the warehouse
remains current and accurate over time.
 Are there controls in place to ensure that data in the warehouse
     remains current and accurate?
 Describe the methods to ensure that data remains current and
     accurate (e.g. periodically refreshed, maintains continuity)?
4. Control of Program and Utilities
RDBMS programs and utilities should be protected from
unauthorized modification or execution.
 Are RDBMS programs and utilities controlled? How?
 What prevents unauthorized modification or execution?




02/10/13                   Page 12                          dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                   Data Warehouse Data Reliability Review
                                                Questions for Sample of Data Warehouse Reports


                                                                      Yes/    WP
                                                                      No/     Ref                       Comments
                                                                      NA
C. REPOSITORY COMPONENT QUESTIONS
5. Backup and Recovery
Backup and recovery facilities should be in place and tested to
ensure availability of data.
 Is data backed up?
 Are there written recovery procedures?
 Describe the backup and recovery tools
 Has this process been tested?
6. User Training
Users should be trained in the warehouse data structures. This
training process should be ongoing to reflect the dynamic warehouse
environment and the nature of the surrounding tools.
 Has user training occurred for warehouse data structures?
 Describe the user training process. Include details on the
     frequency and methods of training as well as who has been
     trained.




02/10/13                   Page 13                           dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                     Data Warehouse Data Reliability Review
                                                  Questions for Sample of Data Warehouse Reports



                                                                          Yes/      WP
                                                                          No/       Ref                                   Comments
                                                                          NA
                                                                                                                             D. META DATA QUESTIONS
Definition: Metadata is data about data.
Metadata specific to a database’s function is its schema. The schema, or overall layout, describes a view of the data held within a database, including entities,
attributes, and data types. Meta Data is a key component in providing quality data in a usable and understandable format.
Metadata repositories hold the entirety of an organization’s metadata. The repository not only contains an expanded set of metadata, but also can be
implemented across multiple hardware platforms and database management systems (DBMS).
Please answer for Each type of Meta Data related to sample 1) Data Warehouse database level and 2)
Report level
1. Notification
Procedures or mechanisms should be established to notify those
responsible for maintenance of Meta Data when operational systems
or the Data Warehouse change.
 Is there a formal notification process?
 Please describe this process.
2. Maintenance and
   Change Control
Programs associated with Meta Data should be subject to the same
change management process as other production programs.
Procedures should be established for the ongoing maintenance and
change control of Meta Data.
 Is a procedure for ongoing maintenance and change control of
    Meta Data?
 Please describe the change management process used for
    programs and documentation.
3. Data Naming and
   Definition Standards
Enterprise data naming and definition standards should be
established and closely followed.
 Do enterprise data naming and definition standards exist?
 If so, how do you ensure that data warehouse follows these?




02/10/13                    Page 14                            dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                    Data Warehouse Data Reliability Review
                                                 Questions for Sample of Data Warehouse Reports


                                                                        Yes/    WP
                                                                        No/     Ref                       Comments
                                                                        NA
                                                                                                           D. META DATA QUESTIONS
4. Data Usage Policies
Enterprise policies for data usage and coded key values should be
established and closely followed.
 Do enterprise policies for data usage and coded key values
     exist?
 If so, how do you ensure that the data warehouse follows these?
5. Access Controls
Access to Meta Data for warehouse users should be defined as "read
only." Update access should be tightly restricted to protect the
integrity of the Meta Data.
Is access to Meta Data controlled to protect its integrity?

For all data elements, a CRUD (Create, Read, Update, Delete)
analysis should be performed to ensure that user access capabilities
are consistent with the intentions of the organization.
 Please describe how access is controlled to Meta Data.
 Who has the rights to create, update and delete

6. Backup and
   Recovery
Viable backup and recovery procedures should be developed and
tested for the Meta Data.
 Is Meta data backed up?
 Are there written recovery procedures?
 Please describe the backup and recovery procedures used for
     Metadata




02/10/13                    Page 15                            dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                     Data Warehouse Data Reliability Review
                                                  Questions for Sample of Data Warehouse Reports



                                                                           Yes/     WP
                                                                           No/      Ref                                    Comments
                                                                           NA
E. DECISION SUPPORT SYSTEM ENGINE QUESTIONS
Definition: The software used to create data structures As the main program that drives user inquiries of the Data Warehouse, the DSS Engine is a critical
component primarily from the perspective of availability. If the DSS Engine is not available for inquiries, or if it is inefficiently used, performance of other
warehouse components can be adversely affected.
Please answer for Each Decision Support Engine related to reports in the Sample
1. Query Controls
Use of a query governor should be considered to control runaway
user queries.
 Have safeguards including technical settings and user training
     to minimize inefficient use such as run away queries?
 Please describe.
2. Change Management
Application and system programs associated with the DSS Engine
should be subject to the same change management process as other
production programs.
 Does the DSS Engine application and system programs follow a
    change management process?
 Please describe the change management process used for
    application programs and system programs
3. User Training
Users should be educated in the efficient usage of the DSS Engine.
 Have users been trained in the efficient usage of the DSS
    Engine?
 Who are the users of the DSS Engine?
 What training have they been provided on its use?

4. Backup and
   Recovery
Viable backup and recovery procedures should be developed and
tested for the DSS Engine to ensure its timely availability in the




02/10/13                     Page 16                            dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                 Data Warehouse Data Reliability Review
                                              Questions for Sample of Data Warehouse Reports


                                                                    Yes/   WP
                                                                    No/    Ref                       Comments
                                                                    NA
E. DECISION SUPPORT SYSTEM ENGINE QUESTIONS
event of an interruption or disaster.
 Is DSS Engine backed up?
 Are there written recovery procedures?
 Please describe the backup and recovery procedures used for the
    DSS Engine.




02/10/13                  Page 17                         dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                     Data Warehouse Data Reliability Review
                                                  Questions for Sample of Data Warehouse Reports



                                                                        Yes/    WP
                                                                        No/     Ref                               Comments
                                                                        NA
F. DECISION SUPPORT SYSTEM APPLICATIONS QUESTIONS
Definition: The software used to access the Warehouse When developed using a powerful DSS engine, the DSS application construction should consist only of
custom data view creation and formatting.
Please answer for Each Decision Support System Application related to Reports in the Sample.
1. User Training
Users should be trained in use of the DSS Application and related
tools and data structures. This training process should be ongoing to
reflect the dynamic warehouse environment and the nature of the
surrounding tools.
 Has training occurred?
 Who are the users of the Decision Support System Applications?
 Describe the training they receive including details on the nature
     and frequency of that training
2. Notification
As DSS engines and personal productivity tools change, the
applications should change accordingly. A process should be
defined to enable proper notification of all appropriate personnel in
the event of change.
 Does a formal notification process exist?
 Please describe this process.
Access Controls
Access to application
programs should be
limited to authorized
personnel.
   Has access to application programs been controlled?
   Who are authorized personnel to application programs
3. Change Management
DSS Application programs should follow the same change
management process as other production programs.




02/10/13                    Page 18                            dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                   Data Warehouse Data Reliability Review
                                                Questions for Sample of Data Warehouse Reports


                                                                       Yes/    WP
                                                                       No/     Ref                       Comments
                                                                       NA
F. DECISION SUPPORT SYSTEM APPLICATIONS QUESTIONS
Changes to application programs should be performed by authorized
personnel, and be consistent with user and database requirements.
Controls should be in place to ensure that correct versions of
warehouse files are used.
 Is a formal change management process followed?
 Please describe the process to control changes to application
    programs and process to ensure that changes met requirements.
    Also describe the process to ensure that the correct versions of
    files are used.




02/10/13                    Page 19                           dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                     Data Warehouse Data Reliability Review
                                                  Questions for Sample of Data Warehouse Reports



                                                                         Yes/     WP
                                                                         No/      Ref                                   Comments
                                                                         NA
                                                      G. USER INTERFACE/ PERSONAL PRODUCTIVITY APPLICATIONS QUESTIONS
Definition: Software tools for final report formats. In the data warehouse environment, the DSS infrastructure can be tightly integrated with personal
productivity applications such as word processing, spreadsheet, personal databases, and electronic mail. Integrated data routing can allow query results to be
routed directly to these applications.
Please answer for each Personal Productivity Application related to reports in the sample.
1. User Training
Users should be trained in use of the Data Warehouse including,
related tools and data structures. This: training process should be
ongoing to reflect the dynamic warehouse environment and the
nature of the surrounding tools.
 Has user training occurred?
 Who are the users?
 What training is provided to them?

2. Notification of
   Changes
As end-user requirements change, user interface tools should change
accordingly. A process should be defined to enable proper
notification of all users in the event of change or upgrade of tools.
Change should be accompanied by appropriate training.
 Is there a formal notification process?
 Please describe this process
3. Access
Access to end-user applications and data should be limited to
authorized personnel.
 Is access controlled?
 Describe how access is to end user applications and data is
    controlled
4. Data Reliability
Completeness and accuracy of data presented in reports should be




02/10/13                    Page 20                            dc0f75ac-f404-493c-8d3a-f7655b35d911.doc
                                                    Data Warehouse Data Reliability Review
                                                 Questions for Sample of Data Warehouse Reports


                                                                           Yes/    WP
                                                                           No/     Ref                       Comments
                                                                           NA
                                                     G. USER INTERFACE/ PERSONAL PRODUCTIVITY APPLICATIONS QUESTIONS
ensured by comparison to upstream sources.
 Is there a process to ensure completeness and accuracy of data in
    reports?
 Describe the process to compare data to upstream sources.
5. Data Recovery
Procedures should be in place to ensure recoverability of data.
 Are there procedures to backup report instances?
 Please describe the data recovery process




02/10/13                    Page 21                               dc0f75ac-f404-493c-8d3a-f7655b35d911.doc

								
To top