Annex 1

Name of the Authority of Public Administration (APA):

Place:

QUESTIONNAIRE
TO DESCRIBE COMPUTER ENVIRONMENT

Contact to the Information System unit and Users units

Name/Function: Telephone Number: Fax Number:

Structure of the unit providing computer services – effective organisational chart to be attached

Who does the unit providing computer services report to? Whom does it present reports to?

Overall Activity of Information System unit

 2

Apart from information recorded above, following aspects are

to be focused on:

- Are the assignments and responsibilities within the IS unit

defined accurately and do they reflect the size of the unit?

- How many employees do work with the IS unit? Is the

number corresponding (is it sufficient)?

- Has the number of employees of the IS unit changed

significantly during the year (staff turnover to be
considered)?

- Do the skills of the IS unit employees reflect

comprehensiveness of a computer environment and an
activity sector concerned?

- Is there a strategy in place for the IS that would be

consistent with the overall strategy of the unit and the
strategy has been approved by the top management?

- How is the quality of services delivered perceived by

users?

Relevant Applications Used by the Organisation

Programme Computer using Date of starting to Date of the most Does the
Application and developed in- the software use the application recent change application
1
purpose house / standard concerned administers data
programme relevant for audit?
 3

1
details on programming language to be provided for applications developed in-house:

Have any problems or limitations arisen in any of the applications? If yes, provide the consequences.

Are there any significant changes planned?

Are there any outputs from applications processed further by the computers of end users (e.g. editor reporting)? If yes, provide
a brief description:

Describe all of the security components that exist within the application:

Hardware and system software

Total number of computers in the organisation:

Computer per 1 employee:

Computer (manufacturer and a model Operational system (and version) Other system software (and version)
no.)

Does the supplier supply and maintain all of the above system software products?
If no, provide explanation:

Overview on Network Connections

Are there network connections among units? If not, what units are not connected and why?

Find out the core places of processing and users’ places and connections between them (draw a simple chart or attach it, if it
 4

exists)

Connections to the Outside Network

Find out the connections to outside networks and describe nature of activity for which such connections are used

Details on connections Purpose (e.g. mail, EDI, Internet) Access control

Date: Auditor: