Need an IT audit done

[CheekyC]

I have a customer that currently outsources their CTO/CIO role e.g. IT management, strategy etc. But my customer is not happy with the service they are getting and their issues not being solved. So I suggested them doing an audit to just see where the gaps are. The audit needs to be top to bottom. I.e. from processes down to whether their email server is correctly set up. They are about 1000 users so the company doing the audit needs to be familiar with enterprise IT. Any chance who I can contact? BCX springs to mind but I think they will be VERY expensive.

Any other suggestions?

 

[HavocXphere]

I'd suggest rather changing the outsourcing company.

The customer is unhappy...the IT audit is not going to fix that. Might as well skip a step & the associated expenses.

>their issues not being solved.

The solution to that is an SLA. An SLA gives you the legal means to light a fire under someone's behind if they are not delivering...people tend to get their sht sorted out when they are staring down the barrel of a big performance penalty.

>The audit needs to be top to bottom. I.e. from processes

Now this is something where IT auditors might actually help. From experience I know that (competent) people are very very bad at spotting gaps in processes. Like "draw them a picture and they still don't see it" bad.

Personally I'd scrap the entire thing (seeing how client is unhappy anyway) and focus on getting a good replacement (with the desired level of controls in place). Take care though...thats an all or nothing thing....if it goes sideways you'll look very bad. If it goes well you'll look like a hero.

edit..try making things as easy as possible for the new guys by grabbing as much useful info from the old supplier as possible. It kinda blows being handed a broken piece of S system as a new supplier and then having to deliver based on that.

 

[ITCynic]

Please mention where your customer is located, ie what city. That will probably help with a response.

 

[funkzar]

I'd suggest rather changing the outsourcing company.



The customer is unhappy...the IT audit is not going to fix that. Might as well skip a step & the associated expenses.

>their issues not being solved.

The solution to that is an SLA. An SLA gives you the legal means to light a fire under someone's behind if they are not delivering...people tend to get their sht sorted out when they are staring down the barrel of a big performance penalty.

>The audit needs to be top to bottom. I.e. from processes

Now this is something where IT auditors might actually help. From experience I know that (competent) people are very very bad at spotting gaps in processes. Like "draw them a picture and they still don't see it" bad.

Personally I'd scrap the entire thing (seeing how client is unhappy anyway) and focus on getting a good replacement (with the desired level of controls in place). Take care though...thats an all or nothing thing....if it goes sideways you'll look very bad. If it goes well you'll look like a hero.

edit..try making things as easy as possible for the new guys by grabbing as much useful info from the old supplier as possible. It kinda blows being handed a broken piece of S system as a new supplier and then having to deliver based on that.

This company is 1000+ people. Do you have any idea the complexity of changing your support company with just 10 staff?
What guarantees are there that changing will fix the issue?

Your only good solution is SLA's. But here is a better one. Have a competent ITIL service manager V2 (preferred) that manages the vendor and the client.

He or she would also fix any process shortcomings and implement SLA agreements and most importantly have the measuring tools to identify problems before they arise. That would only be a fraction of their job description.

A company like BCX charging an arm and leg doesn't guarantee service unless you have someone who's sole purpose it is to make sure they doing their job. Believe me, I speak from a tough experience.