Scenario:

You are conducting an IT audit for a financial institution that has recently implemented a

new cloud$-$based customer relationship management $($CRM$)$ system.

Question $1($a$)$: What are the key challenges you would face when auditing the cloudbased CRM system?

Question $1($b$)$ : What are the key areas you would focus on when auditing the new EHR

system?

Question $1($c$)$: What are the key areas you would focus on when auditing the new ERP

system?

Question$1($d$)$: What are the key areas you would focus on when auditing the new POS

system?

Question $1($e$)$: How do you ensure that the financial institution's data is secure when

using the cloud$-$based CRM system?

Question $1($f$)$: How do you ensure that the EHR system is compliant with relevant

regulations and industry standards, such as HIPAA and HITECH?

Question $1($g$)$: How do you ensure that the ERP system is secure and compliant with relevant

regulations and industry standards, such as SOX and COBIT?

Question $1($g$)$: How do you ensure that the POS system is secure and compliant with relevant

regulations and industry standards, such as PCI DSS$?$