Viewable by the world
Group Access to CIO
Can VIEW the space: cio-editors ,  anonymous ,  all-lbnl-users ,  confluence-administrators , 
Can EDIT the space: confluence-administrators , 
Can ADMINISTER the space: confluence-administrators , 

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Use layoutNORIGHTSIDEBARNORIGHTSIDEBAREffective Date: October 1, 2014 - September 30, 2015

...

5.2 FY15 Assessment Schedule

#

Assessment Type

Schedule (and Title)

Performed By

2.2

Peer Reviews

Every 3-5 years, last assessed in June 2010

Similar institutions

2.3

Internal Audit

Per IAS Audit Plan. The FY15 audit plan does not include any IT focused audits, although some of the audits will likely touch IT (e.g. Continuity Planning).

LBNL Internal Audit Services

2.4

IG Audits and Reviews

Assessment of LBNL occurs at the discretion of oversight entity, audits include:

  • Financial Reporting

  • IT General and Application Controls

  • Federal Information Security Act (FISMA) Audit

  • IT Vulnerability Assessment

  • Others per audit plan

DOE Inspector General (often using KPMG)

2.5

Berkeley Site Office Oversight Activities

Assessment occurs at the discretion of oversight entity.

BSO

2.5

DOE-HSS Oversight Activities

Assessment occurs at the discretion of oversight entity.

DOE-HSS

2.6

Advisory Board

Typically annually

Board members

3.2 

Project Assessments

Within 1 month of end of FY

Office of the CIO

3.3

Self-Assessment Risk Assessment

Annually by 10/1

Office of the CIO/Cyber Security Program

3.4

FMFIA/Entity Assessment

4th Quarter FY13 (Subset of controls related to IT operations)

LBNL Line Management

3.5 

UC Self-Assessment

Assessment occurs at the discretion of UC.

Office of the CIO/Cyber Security Program

3.6

IAS Advisory Service

No advisory services planned for FY15

LBNL Internal Audit Services