Computer Audit and Control Handbook


Book Description

This handbook is an accessible introduction to modern computer audit for new recruits to the profession and for practising financial auditors who need to increase their knowledge of computer auditing. The book will help meet an increasing need for computer audit training in the auditing profession. The basic perspective taken for this handbook is that of the internal auditor and since this is wider than the remit of external auditing, the contents apply to both. Auditors and accountants who wish to develop their knowledge of computer audit and security will find the book especially useful. In addition, information technology professionals and computer science students who are finding issues of security and control increasingly important, will discover this handbook to be of significant use in their work. Published in association with the Institute of Internal Auditors, this book provides a comprehensive introduction to modern computer audit for new recruits to the profession, and for financial auditors who wish to increase their knowledge of computer auditing. The main topics covered include: *computer audit management *auditing applications *small business computers *computer assisted audit techniques *databases *legal and code of practice issues *computer abuse. The author and contributors are audit and security practitioners, with many years' experience in this field. Contributors: Ian Douglas, Deputy Head of Systems Audit at Barclays Bank. Alan Oliphant, Computer Audit Manager, Standard Life Assurance Company, and Chairman of Information Technology Audit Development Committee (IIA); David Bentley, Chief Internal Auditor, Leeds Permanent Building Society and Stephen Hinde (the two latter being Past Presidents, IIA, UK). Published in association with the Institute of Internal Auditors Provides a comprehensive introduction to computer audit for new recruits to this subject Ideal for financial auditors who wish to increase their knowledge of computer auditing




Auditor's Guide to Information Systems Auditing


Book Description

Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." —E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.




Standard for Auditing Computer Applications, Second Edition


Book Description

A Standard for Auditing Computer Applications is a dynamic new resource for evaluating all aspects of automated business systems and systems environments. At the heart of A Standard for Auditing Computer Applications system is a set of customizable workpapers that provide blow-by-blow coverage of all phases of the IT audit process for traditional mainframe, distributed processing, and client/server environments. A Standard for Auditing Computer Applications was developed by Marty Krist, an acknowledged and respected expert in IT auditing. Drawing upon his more than twenty years of auditing experience with leading enterprise organizations, worldwide, Marty walks you step-by-step through the audit process for system environments and specific applications and utilities. He clearly spells out what you need to look for and where to look for it, and he provides expert advice and guidance on how to successfully address a problem when you find one. When you order A Standard for Auditing Computer Applications, you receive a powerful package containing all the forms, checklists, and templates you'll ever need to conduct successful audits on an easy to use CD-ROM. Designed to function as a handy, on-the-job resource, the book follows a concise, quick-access format. It begins with an overview of the general issues inherent in any IT review. This is followed by a comprehensive review of the audit planning process. The remainder of the book provides you with detailed, point-by-point breakdowns along with proven tools for: evaluating systems environments-covers all the bases, including IT administration, security, backup and recovery planning, systems development, and more Evaluating existing controls for determining hardware and software reliability Assessing the new system development process Evaluating all aspects of individual applications, from I/O, processing and logical and physical security to documentation, training, and programmed procedures Assessing specific applications and utilities, including e-mail, groupware, finance and accounting applications, CAD, R&D, production applications, and more







Network Security Auditing


Book Description

This complete new guide to auditing network security is an indispensable resource for security, network, and IT professionals, and for the consultants and technology partners who serve them. Cisco network security expert Chris Jackson begins with a thorough overview of the auditing process, including coverage of the latest regulations, compliance issues, and industry best practices. The author then demonstrates how to segment security architectures into domains and measure security effectiveness through a comprehensive systems approach. Network Security Auditing thoroughly covers the use of both commercial and open source tools to assist in auditing and validating security policy assumptions. The book also introduces leading IT governance frameworks such as COBIT, ITIL, and ISO 17799/27001, explaining their values, usages, and effective integrations with Cisco security products.




Auditing with the Computer


Book Description

This title is part of UC Press's Voices Revived program, which commemorates University of California Press’s mission to seek out and cultivate the brightest minds and give them voice, reach, and impact. Drawing on a backlist dating to 1893, Voices Revived makes high-quality, peer-reviewed scholarship accessible once again using print-on-demand technology. This title was originally published in 1965.




Auditing EDP Systems


Book Description

Shows the audit of computerized accounting systems as part of the audit of the financial statements. Covers the control risk assessment procedures that the auditor performs on computerized systems in meeting objective relating to the audit financial statements.




Auditing Information Systems


Book Description

Have you been asked to perform an information systems audit and don't know where to start? Examine a company's hardware, software, and data organization and processing methods to ensure quality control and security with this easy, practical guide to auditing computer systems--the tools necessary to implement an effective IS audit. In nontechnical language and following the format of an IS audit program, you'll gain insight into new types of security certifications (e.g., TruSecure, CAP SysTrust, CPA WebTrust) as well as the importance of physical security controls, adequate insurance, and digital surveillance systems. Order your copy today!




Auditing IT Infrastructures for Compliance


Book Description

"Auditing IT Infrastructures for Compliance, Second Edition provides a unique, in-depth look at U.S. based Information systems and IT infrastructures compliance laws in the public and private sector. This book provides a comprehensive explanation of how to audit IT infrastructures for compliance based on the laws and the need to protect and secure




IT Auditing Using a System Perspective


Book Description

As the power of computing continues to advance, companies have become increasingly dependent on technology to perform their operational requirements and to collect, process, and maintain vital data. This increasing reliance has caused information technology (IT) auditors to examine the adequacy of managerial control in information systems and related operations to assure necessary levels of effectiveness and efficiency in business processes. In order to perform a successful assessment of a business’s IT operations, auditors need to keep pace with the continued advancements being made in this field. IT Auditing Using a System Perspective is an essential reference source that discusses advancing approaches within the IT auditing process, as well as the necessary tasks in sufficiently initiating, inscribing, and completing IT audit engagement. Applying the recommended practices contained in this book will help IT leaders improve IT audit practice areas to safeguard information assets more effectively with a concomitant reduction in engagement area risks. Featuring research on topics such as statistical testing, management response, and risk assessment, this book is ideally designed for managers, researchers, auditors, practitioners, analysts, IT professionals, security officers, educators, policymakers, and students seeking coverage on modern auditing approaches within information systems and technology.