|
|
Use layout NORIGHTSIDEBAR NORIGHTSIDEBAR Effective Date: October 1, 2014 - September 30, 2015
...
5.2 FY15 Assessment Schedule
# | Assessment Type | Schedule (and Title) | Performed By |
---|---|---|---|
2.2 | Peer Reviews | Every 3-5 years, last assessed in June 2010 | Similar institutions |
2.3 | Internal Audit | Per IAS Audit Plan. The FY15 audit plan does not include any IT focused audits, although some of the audits will likely touch IT (e.g. Continuity Planning). | LBNL Internal Audit Services |
2.4 | IG Audits and Reviews | Assessment of LBNL occurs at the discretion of oversight entity, audits include:
| DOE Inspector General (often using KPMG) |
2.5 | Berkeley Site Office Oversight Activities | Assessment occurs at the discretion of oversight entity. | BSO |
2.5 | DOE-HSS Oversight Activities | Assessment occurs at the discretion of oversight entity. | DOE-HSS |
2.6 | Advisory Board | Typically annually | Board members |
3.2 | Project Assessments | Within 1 month of end of FY | Office of the CIO |
3.3 | Self-Assessment Risk Assessment | Annually by 10/1 | Office of the CIO/Cyber Security Program |
3.4 | FMFIA/Entity Assessment | 4th Quarter FY13 (Subset of controls related to IT operations) | LBNL Line Management |
3.5 | UC Self-Assessment | Assessment occurs at the discretion of UC. | Office of the CIO/Cyber Security Program |
3.6 | IAS Advisory Service | No advisory services planned for FY15 | LBNL Internal Audit Services |