Back to Audit Details
Edit Audit Report (1ST STAGE) for Advanced Operations Technology
Quotation:
GCB-2025-07-0002
Address:
Khorais Rd, Riyadh- Saudi Arabia, P.O. 25904 Al Maadi 4, 151 Street , 11th Floor , Cairo- Egypt P.O. 11431
Contact Person:
Eng. Mohamed Abdelrahman
Email:
AOT@gmail.com
Strength Point:
Use of cloud documented Managment system & ITop open source application
Audit Objectives:
Area for Improvement:
NA
Observation:
NA
Minor NCR:
NA
Major NCR:
NA
Team Leader Recommandations:
There are enough evidance for organization to recommneded to stage 2
No. of Man-Days:
Auditors:
Auditor Name
Auditor Role
Delete
+ Add Auditor
Auditee Members:
Auditee Name
Position
Delete
+ Add Auditee
Audit Findings:
Delete
Clause No.
Requirements/Departement
Determining the scope of the service management system
Evidence
The scope of the SMS is documented with all defined services in (TM-F01 :AOT IT Service Management Plan , rev 1.2 dated 19/3/2023) and is called the AOT catalogue of services such as: • Software Application : Develop Java & .NET • Managed Services : o ERP Support Oracle o Third Party Application\services o Database o Hosting : ? Application ? System ? Network ? Security • ERP Solution : Oracle DB & Application • Business Intelligent : Analysis Reports • Datacenter infrastructure solution • Middleware: Oracle solutions • Share point • Support service : Outsourcing The Boudndary of providing the services is distributed in 2 locations : 1. Riyadh, KSA (All back-end operations such as data center, DBA administrations, Security, etc.) 2. Cairo, Egypt (front –end operations such as front office support, S/W development, Quality Control, etc.) All ISO 27001:2022 Annex are applicable expect A8.30 for outsource development , as all software done inhouse and outsource is not allowed by organization managment. SOA v.3 dated 10 DEC 2023
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Policy
Evidence
Integreated Policy issue 19/02/2020 Rev.1 with document no TM-PS01
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Actions to address risks and opportunities
Evidence
documented risk managment processes AOT risk assessment (rev.1.0 date :23-3-2018)
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Service management objectives and planning to achieve them
Evidence
AOT use Form TM-F03 for its business objectives , issued 1/1/2018 , Objectives for Calander Year 2024 have been established
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Plan the service mangment system
Evidence
AOT IT Service Management Plan , rev 1.2 dated 19/3/2023) have been established and documented
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Documented information
Evidence
ll documents are saved in Document Management system DMS .It is an open source application rev 2.0 with the updated version called QMD application on server , this application have all updated documents and records , and one a document is uploaded to the system this mean that it is a controlled document. XLS sheet called master list and distribution list of SMS documents is attached to DMS show all documents and records used in AOT ITSMS & ISMS.
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Internal audit
Evidence
Last internal audit have been done 22/08/2024 with 2 NCRs related to update DMS
Result
OK
NC
NA
Delete
Clause No.
Requirements/Departement
Management review
Evidence
Last Managment review meeting done 24/09/2024
Result
OK
NC
NA
+ Add Finding
Save Changes
Cancel