continuity planning, disaster the availability, accuracy and regular restoration and recovery plans and backups. protection of information) testing of backups. deficiency and could be Key audit findings identified: ascribed to the following: Backup and recovery Management procedures were in place, considered the current however they did not include backup processes the following: adequate. The systems and Process of initiating the network administrator is backup; also in a process of Retention period of reviewing the backup critical application and recovery procedure requiring backups; document. The process of failed backups; The process of ensuring that tapes are taken offsite; No evidence was provided for ensuring that Payday backups were tested for restoration. On review of the service delivery Financial and Performance Service Delivery 11 Senior 31/03/14 agreement between City of Management agreement will be Manager Johannesburg and the entity, the forwarded to COJ to Strategy Pertinent information is not following deficiencies were ensure that it is properly identified and captured in a identified: signed, and also ensure form and time to support that It has key performance the service level performance reporting indicators. agreement has not been signed by the two parties, the service level agreement does not have key performance indicators, as a result, entity was unable to prepare and include an assessment of the entity’s performance against any measurable performance objectives (KPI’s) set in terms of the service delivery agreement between the entity and its parent
continuity planning, disaster recovery plans and backups. Key audit findings identified: Backup and recovery procedures were in place, however they did not include the following: Process of initiating the backup; Retention period of critical application requiring backups; The process of failed backups; The process of ensuring that tapes are taken offsite; No evidence was provided for ensuring that Payday backups were tested for restoration. the availability, accuracy and protection of information) deficiency and could be ascribed to the following: Management considered the current backup processes adequate. The systems and network administrator is also in a process of reviewing the backup and recovery procedure document. regular restoration and testing of backups. 11 On review of the service delivery agreement between City of Johannesburg and the entity, the following deficiencies were identified: the service level agreement has not been signed by the two parties, the service level agreement does not have key performance indicators, as a result, entity was unable to prepare and include an assessment of the entity’s performance against any measurable performance objectives (KPI’s) set in terms of the service delivery agreement between the entity and its parent Financial and Performance Management Pertinent information is not identified and captured in a form and time to support performance reporting Service Delivery agreement will be forwarded to COJ to ensure that it is properly signed, and also ensure that It has key performance indicators. Senior Manager Strategy 31/03/14
Mid-Year%20Report%202014-02-24.docx