External Auditor at Primeguage Solutions Limited May, 2024

Introduction

• Our tax and billing collection system is fundamental to efficiently managing tax payments and collections, serving as a vital link between taxpayers and the government. However, concerns have emerged regarding security, performance, and load capacity. Instances of slowdowns during peak usage times necessitate a comprehensive audit to assess and address these issues effectively.

Objectives of the Audit

The objectives of this engagement are to:

• Conduct rigorous security testing to identify vulnerabilities and potential risks.
• Perform load testing to evaluate system performance under varying user loads.
• Conduct a Load vs. infrastructure analysis
• Provide actionable recommendations to enhance security and performance.

Scope of Work:

The audit will encompass the following areas:

• Security Testing: Penetration testing to identify and exploit vulnerabilities. Vulnerability assessments focusing on critical areas such as data encryption and access controls. Assessment of authentication mechanisms to ensure robust security.
• Load Testing: Evaluation of system performance under different user activity levels. Identification of bottlenecks contributing to slowdowns during peak usage times.

Qualifications and Experience

The selected auditor must demonstrate:

• Extensive experience in security and load testing, particularly for financial systems.
• Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Licensed Penetration Tester (LPT).
• Proven minimum of three years of work experience.

Deliverables

The audit reports will include:

• Security Testing Report: Identified vulnerabilities with severity ratings. Exploitability assessment for critical vulnerabilities. Remediation recommendations with clear timelines.
• Load Testing Report: Analysis of system performance under various load conditions. Identification of bottlenecks and performance limitations. Recommendations for system improvements to enhance scalability.

Behavioural Competence and Requirements:

• This candidate must have the energy, intellect, and excitement to take on a work-in-process process and help to iterate to achieve industry excellence continually.
• Ability to work under pressure and meet constantly changing timelines.
• Excellent verbal/written communication and data presentation skills, including an ability to effectively communicate with both business and technical teams.
• Ability to work independently, initiative, and remain flexible in an ever-changing environment.
• Fast learner with an interest in a broad range of business functions.
• Possesses an astute attention to detail and excellent problem-solving skills