How should internal audit assess CMDB data quality?
author: AcadiFi Team
Answer:
Internal audit should first identify how the CMDB is used. If it supports incident routing, change impact analysis, ownership, service mapping, or risk reporting, data quality becomes a control issue rather than a housekeeping issue.
Useful tests include comparing CMDB records to source systems, checking required fields, scanning for duplicates and orphan records, testing relationship accuracy for critical services, reviewing update timeliness, and inspecting exception remediation. The key is to connect data quality to decisions the organization makes from that data.
Master CIA Part 3 with our CIA Course
45 lessons · 90+ hours· Expert instruction
Related Questions
What should an auditor do if a supervisor weakens a supported finding?
How should auditors prepare for a technical exit meeting?
When should audit quality concerns be escalated beyond the engagement team?
How does business knowledge affect internal audit quality?
Where should an auditor begin a full-company internal control audit?
Related Articles
Join the Discussion
Ask questions and get expert answers.