A step-by-step guide to successful implementation and control of information systems
More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments.
As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student's version of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.
It has become impossible for today's enterprises of any size and in any market sector to exist without computers to assist with their fundamental business operations. The modern auditor, therefore, requires significantly more knowledge of computers and computer auditing than did auditors of earlier years. In order for organizations to take full advantage of the opportunities that computers can offer, their systems must be controlled and dependable.
Written for those who need to gain a practical working knowledge of the risks and control opportunities within an information processing (IP) environment, as well as the auditing of that environment, Auditor's Guide to Information Systems Auditing includes a complementary student's version of the IDEA Data Analysis Software CD and is particularly useful for professionals and students within the fields of:
Emphasizing the practical implementation of principles and techniques through the use of realistic case studies, Auditor's Guide to Information Systems Auditing follows the approach used by the Information System Audit and Control Association's model curriculum and is an excellent study guide for those preparing for the CISA and CISM exams.
This invaluable reference manual is filled with relevant information helpful
to those accountable to management for the successful implementation and control
of information systems and covers a wide range of topics, serving as an
indispensable introductory reference to IT auditing.
Praise for Auditor's Guide to Information Systems Auditing
Guide to Information Systems Auditing is the most comprehensive book about
auditing that I have ever seen. There is something in this book for
everyone. New auditors will find this book to be their bible—reading it will
enable them to learn what the role of auditors really is and will convey to
them what they must know, understand, and look for when performing audits.
For experiencedauditors, this book will serve as a reality check to
determine whether they are examining the right issues and whether they are
being sufficiently comprehensive in their focus. Richard Cascarino has done
a superb job."
About the Author:
Richard Cascarino MBA, CIA, CISM, CFE
Well known in international auditing circles as one of the most knowledgeable practitioners in the field, Richard is principal of Richard Cascarino and Associates, a highly successful audit training and consultancy company. Richard has been involved during the past eight years in the development of the undergraduate and postgraduate courses in Internal Auditing for the School of Accountancy, University of the Witwatersrand, Johannesburg (Wits), where he continues to lecture and act as examiner. He has also presented the IT Security module of the Wits post-graduate diploma in IT auditing for the past 24 years. He is a regular speaker at National and International Conferences and has presented courses throughout Africa, Europe, the Middle East and the USA. He has served on various Audit Committees and was chairman of the Gauteng Cluster 2 Audit Committee (Johannesburg).
Richard is a Past President of the Institute of Internal Auditors (IIA) in South Africa, was the founding Regional Director of the Southern African Region of the Institute of Internal Auditors Inc. and is a member of both ISACA and the American Institute of Certified Fraud Examiners. He served as International Vice-Chairperson on the IIA’s Quality Control Committee and is a question contributor for the CIA examination the CISA examination and the CISM examination.
Section 1 – The IS Audit Process
Section 2 – IT Governance
Section 3 – Systems and Infrastructure Lifecycle
Section 4 – IT Service Delivery and Support
Section 5 – Protection of Information Assets
Section 6 – Business Continuity and Disaster Recovery
Section 8 – Advanced IS Auditing
Appendix A Standards for the IS Auditor
Appendix B Audit Programme for Application Systems Auditing
Appendix C Logical Access Control Audit Programme
Appendix D Audit Programme for Auditing UNIX / LINUX Environments
Appendix E Audit Programme for Auditing Windows XP/2000 Environments