Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Here a more concrete question:

I am interested in documentation for an External Security Audit for ERP applications.

  1. What are the types of External Security Audit for ERP applications?
  2. What types of resources should be provided in read access only for External Auditors examining ERP applications?
share|improve this question
Paul, as user502 has said in his answer, this question is vague. However I'm sure that you could do a quick edit to make it better (what purpose does your audit have? What sector are you in? Is it internal or external?) so I won't vote to close, but could you make the question more specific? – user185 Nov 29 '10 at 15:16
up vote 2 down vote accepted

"Audit" is such a broad category that this question is not answerable in its current form. If you're about to undergo a PCI-DSS audit, there are checklists to go by: If you're accrediting a system for the US DoD, you'll need the DIACAP documentation. If you're doing an internal audit, local IT management will decide.

share|improve this answer
Actually, you answered partially this question and this is exactly what I need. Can anyone provide me a list of Audits to be followed and the documentation that would show me what are the data they need access to? example in your case you pointed to PCI, so what is there in addition? – Phoenician-Eagle Nov 29 '10 at 13:29
If you visit any of the big-4 audit firms (EY, PwC, Deloitte or KPMG) you will find lists of types of audit on their websites - at a high level, anyway. If you engage any IT auditor to carry out this sort of work they will then let you know what access they need. – Rory Alsop Dec 2 '10 at 11:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.