Information Technology Auditing: Security, Risk Management, Backup, and Disaster Recovery
Throughout her career as an IT Auditor, Dr. Sullivan has focused on helping organizations establish, evaluate, and maintain secure, reliable, and resilient information technology infrastructures. She collaborates with clients to develop and implement effective policies, procedures, and internal controls that protect network resources, safeguard sensitive information, minimize operational risks, and support business continuity.
Recognizing the rapidly evolving nature of information technology, Dr. Sullivan considers continuous learning and professional development essential to maintaining her expertise. Her passion for knowledge drives her to remain informed about emerging technologies, cybersecurity threats, industry standards, and evolving best practices. She understands that effective IT management requires more than implementing technology; it requires establishing sound practices that ensure systems remain secure, reliable, recoverable, and aligned with organizational objectives.
Dr. Sullivan approaches her responsibilities for technology governance, internal controls, and risk assessment with diligence and a strong sense of accountability. She evaluates the effectiveness of security measures, identifies vulnerabilities, reviews system configurations, and assesses whether established policies and procedures adequately protect an organization’s technology assets. She applies the same attention to detail and commitment to protecting systems as she would if she were responsible for maintaining the infrastructure herself.
An essential component of her approach is ensuring that organizations have reliable backup and recovery strategies in place. Dr. Sullivan recognizes that protecting data involves more than preventing unauthorized access; it also requires preparing for hardware failures, accidental deletions, system corruption, cyberattacks, natural disasters, and other unexpected disruptions. She emphasizes the importance of regular backups, secure and appropriately isolated backup storage, routine recovery testing, documented restoration procedures, and clearly defined recovery objectives. These practices help organizations minimize data loss, reduce downtime, and restore critical operations when disruptions occur.
In addition to evaluating security and recovery measures, Dr. Sullivan promotes IT best practices that strengthen operational efficiency and long-term sustainability. These include maintaining current software and security patches, implementing appropriate access controls, enforcing strong authentication practices, documenting system configurations, monitoring network activity, maintaining accurate IT inventories, and conducting periodic risk assessments. She also recognizes the importance of employee training, incident response planning, disaster recovery documentation, and regularly testing established procedures to ensure they remain effective.
Through comprehensive assessments and practical, research-informed recommendations, Dr. Sullivan helps organizations identify weaknesses, address vulnerabilities, strengthen internal controls, and develop actionable plans for improving their technology environments. Her approach emphasizes proactive risk management, data protection, operational resilience, and continuous improvement. Ultimately, her goal is to help organizations establish secure and dependable IT infrastructures that not only protect valuable information but also support business continuity, recovery readiness, and sustained organizational success.