by Richard E. Cascarino
2007 (512 pages)
ISBN:9780470009895
Emphasizing the practical implementation of principles and techniques through the use of realistic case studies, this book was written for those who need to gain a working knowledge of the risks and control opportunities within an IP environment.
Table of Contents
Auditor’s Guide to Information Systems Auditing
Preface
Part I - IS Audit Process
Chapter 1
-
Technology and Audit
Chapter 2
IS Audit Function Knowledge
Chapter 3
IS Risk and Fundamental Auditing Concepts
Chapter 4
Standards and Guidelines for IS Auditing
Chapter 5
Internal Controls Concepts Knowledge
Chapter 6
Risk Management of the IS Function
Chapter 7
Audit Planning Process
Chapter 8
Audit Management
Chapter 9
Audit Evidence Process
Chapter 10
Audit Reporting Follow-up
Part II - Information Systems/Information Technology Governance
Chapter 11
Management
Chapter 12
Strategic Planning
Chapter 13
Management Issues
Chapter 14
Support Tools and Frameworks
Chapter 15
Governance Techniques
Part III - Systems and Infrastructure Lifecycle Management
Chapter 16
Information Systems Planning
Chapter 17
Information Management and Usage
Chapter 18
Development, Acquisition, and Maintenance of Information Systems
Chapter 19
Impact of Information Technology on the Business Processes and Solutions
Chapter 20
Software Development
Chapter 21
Audit and Control of Purchased Packages
Chapter 22
Audit Role in Feasibility Studies and Conversions
Chapter 23
Audit and Development of Application Controls
Part IV - Information Technology Service Delivery and Support
Chapter 24
Technical Infrastructure
Chapter 25
Service Center Management
Part V - Protection of Information Assets
Chapter 26
Information Assets Security Management
Chapter 27
Logical Information Technology Security
Chapter 28
Applied Information Technology Security
Chapter 29
Physical and Environmental Security
Part VI - Business Continuity and Disaster Recovery
Chapter 30
Protection of the Information Technology Architecture and Assets: Disaster Recovery Planning
Chapter 31
Insurance
Part VII - Advanced IS Auditing
Chapter 32
Auditing E-commerce Systems
Chapter 33
Auditing UNIX/Linux
Chapter 34
Auditing Windows
Chapter 35
Foiling the System Hackers
Chapter 36
Investigating Information Technology Fraud
Appendix A
Ethics and Standards for the IS Auditor*
Appendix B
Audit Program for Application Systems Auditing
Appendix C
Logical Access Control Audit Program
Appendix D
Audit Program for Auditing UNIX/Linux Environments
Appendix E
Audit Program for Auditing Windows XP/2000 Environments
