The purpose of this sample audit work program is to review an organization’s system backup procedures, which aims to ensure that all critical applications and data are adequately backed up and recoverable in the event of data loss or system failures. The document offers a structured process, starting with planning and fieldwork to detailed testing of backup operations and media handling. Organizations are equipped to identify responsible personnel, verify the use of backup scheduling software, and assess the effectiveness of backup jobs, including their compliance with scheduled times and the integrity of backup tapes.

Additionally, the program includes steps for interviewing personnel, documenting current backup processes, and comparing these with stakeholders' needs to identify any discrepancies. By analyzing backup log files and observing backup tape management, organizations can highlight potential risks and recommend improvements. The ultimate goal is to provide a thorough audit that ensures that the organization's backup procedures are robust, compliant and aligned with best practices, thus safeguarding critical business data against unforeseen disruptions.

Auditing steps include:

• Interview appropriate personnel and document the current process for identifying data files and applications to be backed up and the required backup schedules for each application.
• Evaluate the current process and determine if it is likely to identify all items requiring backup and the appropriate backup schedule for each.
• Identify all applications and data files currently involved in the backup process.
• Document the backup schedules for each selected for detailed testing.