Computer Audit, Control, and Security


Book Description

Offers comprehensive, up-to-date guidance on new and evolving computer audit, control, and security issues. Each chapter contains both background discussions and sets of control objectives and audit procedures useful for the auditor in performing actual reviews. Since every organization is unique, these objectives and procedures are also included in diskette format so that auditors can tailor them to specific and individual audit projects.







Auditing Information and Cyber Security Governance


Book Description

"A much-needed service for society today. I hope this book reaches information managers in the organization now vulnerable to hacks that are stealing corporate information and even holding it hostage for ransom." – Ronald W. Hull, author, poet, and former professor and university administrator A comprehensive entity security program deploys information asset protection through stratified technological and non-technological controls. Controls are necessary for counteracting threats, opportunities, and vulnerabilities risks in a manner that reduces potential adverse effects to defined, acceptable levels. This book presents a methodological approach in the context of normative decision theory constructs and concepts with appropriate reference to standards and the respective guidelines. Normative decision theory attempts to establish a rational framework for choosing between alternative courses of action when the outcomes resulting from the selection are uncertain. Through the methodological application, decision theory techniques can provide objectives determination, interaction assessments, performance estimates, and organizational analysis. A normative model prescribes what should exist according to an assumption or rule.










Auditing Information Systems


Book Description

Have you been asked to perform an information systems audit and don't know where to start? Examine a company's hardware, software, and data organization and processing methods to ensure quality control and security with this easy, practical guide to auditing computer systems--the tools necessary to implement an effective IS audit. In nontechnical language and following the format of an IS audit program, you'll gain insight into new types of security certifications (e.g., TruSecure, CAP SysTrust, CPA WebTrust) as well as the importance of physical security controls, adequate insurance, and digital surveillance systems. Order your copy today!




Computer Audit and Control Handbook


Book Description

This handbook is an accessible introduction to modern computer audit for new recruits to the profession and for practising financial auditors who need to increase their knowledge of computer auditing. The book will help meet an increasing need for computer audit training in the auditing profession. The basic perspective taken for this handbook is that of the internal auditor and since this is wider than the remit of external auditing, the contents apply to both. Auditors and accountants who wish to develop their knowledge of computer audit and security will find the book especially useful. In addition, information technology professionals and computer science students who are finding issues of security and control increasingly important, will discover this handbook to be of significant use in their work. Published in association with the Institute of Internal Auditors, this book provides a comprehensive introduction to modern computer audit for new recruits to the profession, and for financial auditors who wish to increase their knowledge of computer auditing. The main topics covered include: *computer audit management *auditing applications *small business computers *computer assisted audit techniques *databases *legal and code of practice issues *computer abuse. The author and contributors are audit and security practitioners, with many years' experience in this field. Contributors: Ian Douglas, Deputy Head of Systems Audit at Barclays Bank. Alan Oliphant, Computer Audit Manager, Standard Life Assurance Company, and Chairman of Information Technology Audit Development Committee (IIA); David Bentley, Chief Internal Auditor, Leeds Permanent Building Society and Stephen Hinde (the two latter being Past Presidents, IIA, UK). Published in association with the Institute of Internal Auditors Provides a comprehensive introduction to computer audit for new recruits to this subject Ideal for financial auditors who wish to increase their knowledge of computer auditing







Information Technology Control and Audit, Second Edition


Book Description

Information Technology Control and Audit, Second Edition is an excellent introductory textbook for IT auditing. It covers a wide range of topics in the field including the audit process, the legal environment of IT auditing, security and privacy, and much more. This textbook first examines the foundation of IT audit and control, discussing what IT auditing involves and the guidance provided by organizations in dealing with control and auditability issues. It then analyzes the process of audit and review, explores IT governance and control, and discusses the CobiT framework and steps that align IT decisions with business strategy. This volume examines project management processes that ensure that projects are controlled from inception through integration. It continues by addressing auditing IT acquisition and implementation, describing risks and controls as related to the life cycle of application systems. It highlights the purchase and installation of new systems, as well as change management. The next section examines the auditing of IT operations in both standalone and global environments, covering types of IT operation, issues related to specific platforms, risk and control assessment, and audit methods and support tools. The textbook concludes with a review of emerging issues, providing undergraduate and graduate students with a thorough overview of a topic critical to organizational security and integrity.