Audit Services

Audit services
Security
Resilience
Compliance

Last updated 18/09/2012 Slide 1
©2012 Managed Networks. The MN logo, circles device and DesktopLive logo are registered trademarks.

Agenda
• Our mission and culture
• Our credentials
• The executive team
• Why choose us to audit your IT?
• Sample activities


Our mission and culture
Managed Networks has provided better IT to SMEs
for more than 18 years.
Our highly qualified professionals give
clear, unbiased advice in plain English.
We listen to our customers,
understand their business needs,
and deliver appropriate IT solutions.
Our world-class service is backed by our
unique proactive service warranty.


Our credentials
Microsoft Gold Partner; first small business specialist to achieve Gold Server Platform
competency; multiple 5-star Pinpoint ratings

Dell, Citrix, Cisco, HP, VMWare partnerships and qualified staff

Intellect (UK IT trade body) member

>180 clients across multiple sectors from manufacturing to finance

Average client retention period > 7 years


The executive team
Ben Rapp
– Founder & CEO. 25 years’ industry experience. Fellow of the British Computer Society. Chartered IT
Professional. Certified Information Systems Security Professional. Intellect board member.

Nick Caplan
– Chairman. Former Logica plc executive board member. Previously head of CSC financial services.
Multiple board positions including UKTI.

Stefania Dorudottir
– CFO. Ex-Deloittes ACA. Experienced technology and venture FD.

Paul Saklatvala
– CTO. >10 years with Managed Networks. Certified Information Security Auditor. MCSE, CCA, CCNP.


Why choose us?
A Managed Networks audit is much more than a technology catalogue.
We can help you:
Define and validate your organisation’s strategy
Choose the right technologies and approaches
Review your people and systems as well as your kit and software
Benchmark your processes and budgets against best practice
Assess your IT risks: security, BCP, flexibility, capability
Identify your training and development roadmap
Manage your supplier selection process and relationships

and, of course, catalogue your technology and look for issues...


Sample activities
Strategy workshop TCO validation Process validation
<- Advice Consultants and
Board Business plan -> IT Steering Group
Requirements -> lead suppliers

Business
D - Pro

Year 0 Year 1 Year 2 Year 3 Year 4 Year 5 Year 6 Year 7 Year 8 Year 9 Year 10 Year 11 Year 12 Year 13 Year 14 Year 15
ire
<

needs
cti po

e ->
C onventional one-time purchase
ve sa

vic
Ad nts
s ls

< - e me
->

ir Office 40,000 40,000 40,000 40,000
qu
Re C AL 23,700 23,700 23,700 23,700
RDS 8,000 8,000 8,000 8,000 Specify the requirement

IT Director Total 71,700 71,700 71,700 71,700

C onventional purchase with software assurance renewals
Consult colleagues, practitioners and the market
Office 63,900 29,700 29,700 29,700 29,700 29,700
C AL 23,700 10,200 10,200 10,200 10,200 10,200
->
ne y

Pro Ou

RDS 9,900 4,500 4,500 4,500 4,500 4,500
s teg

the options
<-
ed

Examine
je tcom
es tra

cts e
sin - S

Total 97,500 44,400 44,400 44,400 44,400 44,400
-> s
Bu <

OVS rental agreement Procure a solution
Office 5,800 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500
C AL 2,000 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900
<- Capabilities Business
Users
Requirements -> Analyst
User issues -> IT Manager
RDS 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 Test the system

Total 10,100 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700

Average cost per annum to deliver 15+1 years' service Release to users
Issues ->
<- Tasks

One-time 17,925
One-time+SA 19,969
Evaluate the project
OVS rental 17,225

Operational resources

In-house Outsourced Vendors
Effective
solutions

BCP review Documentation Traffic lighting
Desirable

Sales & marketing Resilience
Compliance
Accounts (except As the majority of the servers are located in Whetstone the Harley Street
payable warehouse site is entirely dependent it. As there is no disaster recovery provision in
the unfortunate event of a total system outage in Whetstone neither site
Material safety)
Switch Disaster would be able to function. In addition an outage of the inter-site
HR
Recovery connectivity between Whetstone and Harley Street would prevent Harley
Street from operating.
Inbound supply
Product Action
Credit chain WNASSERV WDOCSERV CITRIX01 CITRIX02 CITRIX03 CITRIX04 CITRIXWEB
development A local Citrix sever in Harley Street should be installed to provide some
control
Switch functionality to users in the event of a link outage.
Critical
A disaster recovery solution should be investigated.
2mb SDSL
(Easynet/Citrix inbound)
SOP Customer Being a multi site/Citrix environment, lends it self to self resilience with
Legal (NB:
service users able to work from alternate sites. Spreading the server environment
this can
helpline would allow for some form of disaster recovery, however this has not
Picking & move up if a
Department Results 8mb ADSL
been implemented.
System Tax Audit BSD C o Sec deal is in Audit
Tax Bureau Payroll Average C ount P1 C ount
WOCRSERV WPAYSERV WVIZSERV WVPMSERV WSQLSERV HAPPSERV1 WEXCHSRV WAPPSERV (Easynet/Internet) Multiple
shipping Firewall
sites
Excel 1 1 2 3 negotiation)
1 2 1 1 1.50 8 5
rd Action
3 floor switch
Single View 1 2 2 2 1 2 2 1 1.63 8 3 See Disaster Recovery.
Customer incident 10mb leased line

management 2
Telephony 2 2 2 1 1 2 1 1.63 8 3 (Harley Street)
With hardware warranty coming to an end in 2010.
C aseware 2 1 1 1 1.25 4 3
Warehouse
Email 1 2 2 1 3 2 2 1 1.75 8 3 Action
safety
Viztopia/VPM 3 1 1 3 3 1 2.00 6 3
Hardware Server warranties should be current and with the servers reaching end of
Taxpoint 1 1 1.00 2 2 Gnd floor switch WAP WAP WAP WAP life it would be beneficial to consider a server refresh.
Telephone System Call Management System
Word 2 1 3 2 2 2 2 1 1.88 8 2
Printing 2 2 1 2 2 2 1 1.71 7 2 The Whetstone site has UPS provision to server and data comms
BACS payments
PTP
(key suppliers & 1 2 1.50 2 1 equipment in the racks. The Harley Street site has UPS provision for
Scanning month 2 2 1 3 2 2 2 2.00 7 1 switching but not for data comms (which are located in an alternate
staff at
Power location).
end)
Blueprint 3 1 3 2.33 3 1
Fax 3 2 3 1 2.25 4 1 The survey found no UPS signalling software installed on the servers to
Gerald Edelman
File server 3 1 2.00 2 1 allow for automatic shutdown in the event of an extended power outage.
Network Infrastructure

Quickbooks 1 1.00 1 1 Whetstone Action
v1
Sage 1 1.00 1 1 Connect signalling equipment and install software to all servers upgrading
2009-12-19
Sage Instant 1 1.00 1 1 UPS hardware where necessary. Relocate data comms hardware to
Star payroll 1 1.00 1 1 provide UPS protection.
BAC S 1 1.00 1 1
Remote Access is provided by Citrix using the Web Interface on the server
Internet 2 2 3 2 2 2 3 2 2.25 8 0
CITRIXWEB (previously known as NFuse). However, the Web Interface is
Mobile email 3 3 3 2 3 3 2.83 6 0 only installed on this single server and is a single point of failure for
FTInteractive 3 3 3.00 2 0 Remote remote access.
Access Action
Configure Citrix Web Interface and firewalls for standby remote access.


Activity details (1)
<- Advice Consultants and
The Strategy Workshop is aimed at senior management. We review your existing
strategy documentation and your current IT provision. Working with your senior team
Board Business plan -> IT Steering Group
Requirements -> lead suppliers
D - Pro
ire
<

cti po

vice ts ->
ve sa
s ls

Ad
<- men
->

uire
Req

IT Director

we map out and prioritise your business objectives. We look at how IT decisions are
->
ne y

Pro Ou
s teg

<-
ed

je tcom

made and how the impact of those decisions is measured. Using this analysis and
es tra

cts e
sin - S

-> s
Bu <

<- Capabilities Business
Users User issues -> IT Manager
Requirements -> Analyst

information gathered from the business we present recommendations for enhancing
Issues ->
<- Tasks

Operational resources

the value delivered to the business by IT.
In-house Outsourced Vendors

Year 0 Year 1 Year 2
C onventional one-time purchase
Office 40,000
Year 3 Year 4 Year 5

40,000
Year 6 Year 7 Year 8 Year 9 Year 10 Year 11 Year 12 Year 13 Year 14 Year 15

40,000 40,000
How do you assess the cost of IT? Our Total Cost of Ownership analysis reviews your IT
C AL 23,700 23,700 23,700 23,700
RDS

Total

C AL
8,000

71,700

C onventional purchase with software assurance renewals
Office 63,900
23,700
29,700
10,200
8,000

71,700

29,700
10,200
29,700
10,200
8,000

71,700

29,700
10,200
8,000

71,700

29,700
10,200
budget, allocating all costs against corresponding profit centres, projecting costs
forward – including hidden maintenance costs – and adjusting for risk. The result is a
RDS 9,900 4,500 4,500 4,500 4,500 4,500

Total 97,500 44,400 44,400 44,400 44,400 44,400

OVS rental agreement
Office 5,800 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500 11,500
C AL 2,000 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900 3,900
RDS 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300 2,300

clear view of the costs and benefits of your IT programme with a methodology for
Total 10,100 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700 17,700

Average cost per annum to deliver 15+1 years' service
One-time 17,925
One-time+SA 19,969
OVS rental 17,225

assessing future projects and comparing approaches.

How well are your IT projects managed? How well does your IT team serve your users?
Business
needs

Specify the requirement
How do you measure outcomes? How do you make sure that learning from success –
Consult

Examine
colleagues, practitioners and the market

the options
and from failure – is fed back into the decision-making process? Our Process Audit looks
Procure

Test
a solution

the system
at the detail of your IT operations and compares it to best practice in your sector and
across the IT industry. Our long experience of working with SMEs delivers processes
Release to users

Evaluate the project

that really work without getting in the way.
Effective
solutions


Activity details (2)
Business Continuity Planning is about much more than just backup. The key is to avoid
System
Excel
Single View
Telephony
C aseware
Tax
1
1
2
2
Audit
1
2
2
1
2
2
2
Department
BSD C o Sec
3
2
2
Tax Bureau
1
1
1
1
2
2
1
Audit Payroll
1
2
2
1
1
1
1
Average
1.50
1.63
1.63
1.25
Results
C ount P1 C ount
8
8
8
4
5
3
3
3
business interruption, rather than recover from it. It’s a sobering fact that 70% of
businesses which experience a major IT disaster without a tested continuity plan never
Email 1 2 2 1 3 2 2 1 1.75 8 3
Viztopia/VPM 3 1 1 3 3 1 2.00 6 3
Taxpoint 1 1 1.00 2 2
Word 2 1 3 2 2 2 2 1 1.88 8 2
Printing 2 2 1 2 2 2 1 1.71 7 2
PTP 1 2 1.50 2 1
Scanning 2 2 1 3 2 2 2 2.00 7 1
Blueprint 3 1 3 2.33 3 1

recover. The Business Continuity Assessment will challenge your existing plans and help
Fax 3 2 3 1 2.25 4 1
File server 3 1 2.00 2 1
Quickbooks 1 1.00 1 1
Sage 1 1.00 1 1
Sage Instant 1 1.00 1 1
Star payroll 1 1.00 1 1
BAC S 1 1.00 1 1
Internet 2 2 3 2 2 2 3 2 2.25 8 0

you develop a solution that protects your business and complies with regulations.
Mobile email 3 3 3 2 3 3 2.83 6 0
FTInteractive 3 3 3.00 2 0

Resilience
As the majority of the servers are located in Whetstone the Harley Street
site is entirely dependent it. As there is no disaster recovery provision in
the unfortunate event of a total system outage in Whetstone neither site
would be able to function. In addition an outage of the inter-site
Is your network at risk? Do you have sufficient licences for your current usage? Are you
Disaster

following best practice? Working from the output of our Documentation Audit, we
Recovery connectivity between Whetstone and Harley Street would prevent Harley
Street from operating.
Action
A local Citrix sever in Harley Street should be installed to provide some
functionality to users in the event of a link outage.
A disaster recovery solution should be investigated.

Being a multi site/Citrix environment, lends it self to self resilience with
users able to work from alternate sites. Spreading the server environment

carry out a comprehensive risk analysis, presenting the results in an easy-to-digest
would allow for some form of disaster recovery, however this has not
Multiple been implemented.
sites Action
See Disaster Recovery.

With hardware warranty coming to an end in 2010.
Action
Server warranties should be current and with the servers reaching end of

Traffic Light format. Red lights are critical risks such as under-licensing or failed
Hardware
life it would be beneficial to consider a server refresh.

The Whetstone site has UPS provision to server and data comms
equipment in the racks. The Harley Street site has UPS provision for
switching but not for data comms (which are located in an alternate
Power location).
The survey found no UPS signalling software installed on the servers to
allow for automatic shutdown in the event of an extended power outage.

components; amber lights are warnings – single points of failure, deviation from best
Action
Connect signalling equipment and install software to all servers upgrading
UPS hardware where necessary. Relocate data comms hardware to
provide UPS protection.

Remote Access is provided by Citrix using the Web Interface on the server
CITRIXWEB (previously known as NFuse). However, the Web Interface is
only installed on this single server and is a single point of failure for
Remote remote access.

practice – and green means fit for purpose.
Access Action
Configure Citrix Web Interface and firewalls for standby remote access.

Before you can review your existing IT provision, you need to know what you’ve got.
Switch

Switch
WNASSERV WDOCSERV CITRIX01 CITRIX02 CITRIX03 CITRIX04 CITRIXWEB
Many of our higher-level audit activities rely on comprehensive and accurate IT
documentation. Our technical Documentation Audit compares your paperwork to your
2mb SDSL
(Easynet/Citrix inbound)

8mb ADSL
WOCRSERV WPAYSERV WVIZSERV WVPMSERV WSQLSERV HAPPSERV1 WEXCHSRV WAPPSERV (Easynet/Internet)
Firewall
3rd floor switch
10mb leased line
(Harley Street)

Gnd floor switch WAP WAP WAP WAP
Telephone System Call Management System

reality and fills in the gaps; including documenting your whole system from scratch if
Gerald Edelman
Network Infrastructure
Whetstone
v1
2009-12-19 necessary.


Managed Networks

0800 783 6170
info@mn.co.uk
www.mn.co.uk

Call, email or visit our website for a
free, no-obligation consultation.


Audit Services

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie Audit Services

Ähnlich wie Audit Services (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Audit Services