1. Staff Meeting December 2006

2. Staff Meeting Agenda Catch Up – where are we now Future – where are we going Discussions

3. Catch Up VS Modernisation Challenges Communicating what we do and why! Meeting expectations Staffing and other resources Strategic direction Developments 05-06 ICT Roadmap

4. The Future is Bright but with many Challenges Audits and constant reviews Can we reduce these? Strategy and Development work ICT Roadmap (06-07 onwards) MIS machine room move Consolidate Core server infrastructure and support Staff Moves More ???? Sickness & Absence policy PDR Building Current state Future possibilities ITS Branding Help Desk

5. Audit Process IT very much on the agenda Central and distributed Recent ITS audit - Intense even though high level audit Auditors interested in processes, procedures, controls and evidence - supporting or otherwise

6. Audit Process Audit process can be useful if treated positively (difficult to do) Independent review Makes us think about processes and procedures

7. Audit process Identifies gaps in processes, procedures and controls – OF COURSE WE DO BACKUPS, WHAT A SILLY QUESTION; but what happened to last nights – do we know, did it fail, why?, who should be told, what are the implications and who is responsible for fixing it and when. Can be used to raise issues of concern and add weight to requests for additional resources

8. Audit Initial Findings Improve environmental controls (P2) Introduce a formal change management process (P2) Improve backup/restore Process (P2) Improve service monitoring (P2) Improve Service Desk processes (P2) Improve security for non-managed systems (P2) Improve physical access controls (P3)

9. IT under scrutiny Previous Internal Audit commissioned a security gap analysis from Bolden James Delloittes (external) internal audit with a strong IT focus; DR/BC ICT Strategy Security Marsh consulting engaged to review BC and DR planning KPMG end of financial year IT audit

10. Our Environment IT in the spotlight – CS alone costs circa 4M/year Senior management looking for assurances that critical services are sustainable and that investments are justified IT moving to always on, 24x7, users less tolerant of downtime and failures, shrinking development time, shrinking backup windows IT now auditable against University requirements, peers and business best practices – requires more formal approaches e.g., DR/BC planning, ITIL service management, Project management etc Challenge for all of us – more pressure, more work, more management and admin processes