close menu
Bookswagon-24x7 online bookstore
close menu
My Account
Home > Business and Economics > Finance and accounting > Accounting > Auditor's Guide to Information Systems Auditing: (English)
Auditor's Guide to Information Systems Auditing: (English)

Auditor's Guide to Information Systems Auditing: (English)

          
5
4
3
2
1

Out of Stock


Premium quality
Premium quality
Bookswagon upholds the quality by delivering untarnished books. Quality, services and satisfaction are everything for us!
Easy Return
Easy return
Not satisfied with this product! Keep it in original condition and packaging to avail easy return policy.
Certified product
Certified product
First impression is the last impression! Address the book’s certification page, ISBN, publisher’s name, copyright page and print quality.
Secure Checkout
Secure checkout
Security at its finest! Login, browse, purchase and pay, every step is safe and secured.
Money back guarantee
Money-back guarantee:
It’s all about customers! For any kind of bad experience with the product, get your actual amount back after returning the product.
On time delivery
On-time delivery
At your doorstep on time! Get this book delivered without any delay.
Notify me when this book is in stock
Add to Wishlist

About the Book

Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." -E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.

Table of Contents:
PREFACE. ABOUT THE CD. PART I. IS Audit Process. CHAPTER 1. Technology and Audit. Technology and Audit. Batch and On-Line Systems. CHAPTER 2. IS Audit Function Knowledge. Information Systems Auditing. What Is Management? Management Process. Understanding the Organization's Business. Establishing the Needs. Identifying Key Activities. Establish Performance Objectives. Decide The Control Strategies. Implement and Monitor the Controls. Executive Management's Responsibility and Corporate Governance. Audit Role. Conceptual Foundation. Professionalism within the IS Auditing Function. Relationship of Internal IS Audit to the External Auditor. Relationship of IS Audit to Other Company Audit Activities. Audit Charter. Charter Content. Outsourcing the IS Audit Activity. Regulation, Control, and Standards. CHAPTER 3. IS Risk and Fundamental Auditing Concepts. Computer Risks and Exposures. Effect of Risk. Audit and Risk. Audit Evidence. Reliability of Audit Evidence. Audit Evidence Procedures. Responsibilities for Fraud Detection and Prevention. CHAPTER 4. Standards and Guidelines for IS Auditing. IIA Standards. Code of Ethics. Advisory. Aids. Standards for the Professional Performance of Internal Auditing. ISACA Standards. ISACA Code of Ethics. COSO: Internal Control Standards. BS 7799 and ISO 17799: IT Security. NIST. BSI Baselines. CHAPTER 5. Internal Controls Concepts Knowledge. Internal Controls. Cost/Benefit Considerations. Internal Control Objectives. Types Of Internal Controls. Systems of Internal Control. Elements of Internal Control. Manual and Automated Systems. Control Procedures. Application Controls. Control Objectives and Risks. General Control Objectives. Data and Transactions Objectives. Program Control Objectives. Corporate IT Governance. CHAPTER 6. Risk Management of the IS Function. Nature of Risk. Auditing in General. Elements of Risk Analysis. Defining the Audit Universe. Computer System Threats. Risk Management. CHAPTER 7. Audit Planning Process. Benefits of an Audit Plan. Structure of the Plan. Types of Audit. CHAPTER 8. Audit Management. Planning. Audit Mission. IS Audit Mission. Organization of the Function. Staffing. IS Audit as a Support Function. Planning. Business Information Systems. Integrated IS Auditor vs Integrated IS Audit. Auditees as Part of the Audit Team. Application Audit Tools. Advanced Systems. Specialist Auditor. IS Audit Quality Assurance. CHAPTER 9. Audit Evidence Process. Audit Evidence. Audit Evidence Procedures. Criteria for Success. Statistical Sampling. Why Sample? Judgmental (or Non-Statistical) Sampling. Statistical Approach. Sampling Risk. Assessing Sampling Risk. Planning a Sampling Application. Calculating Sample Size. Quantitative Methods. Project Scheduling Techniques. Simulations. Computer Assisted Audit Solutions. Generalized Audit Software. Application and Industry-Related Audit Software. Customized Audit Software. Information Retrieval Software. Utilities. On-Line Inquiry. Conventional Programming Languages. Microcomputer-Based Software. Test Transaction Techniques. CHAPTER 10. Audit Reporting Follow-up. Audit Reporting. Interim Reporting. Closing Conferences. Written Reports. Clear Writing Techniques. Preparing To Write. Basic Audit Report. Executive Summary. Detailed Findings. Polishing the Report. Distributing the Report. Follow-Up Reporting. Types of Follow-Up Action. PART II. Information Systems/Information Technology Governance. CHAPTER 11. Management. IS Infrastructures. Project-Based Functions. Quality Control. Operations and Production. Technical Services. Performance Measurement and Reporting. Measurement Implementation. CHAPTER 12. Strategic Planning. Strategic Management Process. Strategic Drivers. New Audit Revolution. Leveraging IS. Business Process Re-Engineering Motivation. IS as an Enabler of Re-Engineering. Dangers of Change. System Models. Information Resource Management. Strategic Planning for IS. Decision Support Systems. Steering Committees. Strategic Focus. Auditing Strategic Planning. Design the Audit Procedures. CHAPTER 13. Management Issues. Privacy. Copyrights, Trademarks, and Patents. Ethical Issues. Corporate Codes of Conduct. IT Governance. Sarbanes-Oxley Act. Housekeeping. CHAPTER 14. Support Tools and Frameworks. General Frameworks. COSO: Internal Control Standards. Other Standards. CHAPTER 15. Governance Techniques. Change Control. Problem Management. Auditing Change Control. Operational Reviews. Performance Measurement. ISO 9000 Reviews. PART III. Systems and Infrastructure Lifecycle Management. CHAPTER 16. Information Systems Planning. Stakeholders. Operations. Systems Development. Technical Support. Other System Users. Segregation of Duties. Personnel Practices. Object-Oriented Systems Analysis. Enterprise Resource Planning. CHAPTER 17. Information Management and Usage. What Are Advanced Systems? Service Delivery and Management. CHAPTER 18. Development, Acquisition, and Maintenance of Information Systems. Programming Computers. Program Conversions. System Failures. Systems Development Exposures. Systems Development Controls. Systems Development Life Cycle Control: Control Objectives. Micro-Based Systems. CHAPTER 19. Impact of Information Technology on the Business Processes and Solutions. Impact. Continuous Monitoring. Business Process Outsourcing. E-Business. CHAPTER 20. Software Development. Developing a System. Change Control. Why Do Systems Fail? Auditor's Role in Software Development. CHAPTER 21. Audit and Control of Purchased Packages. Information Systems Vendors. Request For Information. Requirements Definition. Request For Proposal. Installation. Systems Maintenance. Systems Maintenance Review. Outsourcing. CHAPTER 22. Audit Role in Feasibility Studies and Conversions. Feasibility Success Factors. Conversion Success Factors. CHAPTER 23. Audit and Development of Application Controls. What Are Systems? Classifying Systems. Controlling Systems. Control Stages. System Models. Information Resource Management. Control Objectives of Business Systems. General Control Objectives. CAATS and their Role in Business Systems Auditing. Common Problems. Audit Procedures. CAAT Use in Non-Computerized Areas. Designing an Appropriate Audit Program. PART IV. Information Technology Service Delivery and Support. CHAPTER 24. Technical Infrastructure. Auditing the Technical Infrastructure. Computer Operations Controls. Operations Exposures. Operations Controls. Personnel Controls. Supervisory Controls. Operations Audits. CHAPTER 25. Service Center Management. Continuity Management and Disaster Recovery. Managing Service Center Change. PART V. Protection of Information Assets. CHAPTER 26. Information Assets Security Management. What Is Information Systems Security? Control Techniques. Workstation Security. Physical Security. Logical Security. User Authentication. Communications Security. Encryption. How Encryption Works. Encryption Weaknesses. Potential Encryption. Data Integrity. Double Public Key Encryption. Steganography. Information Security Policy. CHAPTER 27. Logical Information Technology Security. Computer Operating Systems. Tailoring the Operating System. Auditing the Operating System. Security. Criteria. Security Systems: Resource Access Control Facility. Auditing RACF. Access Control Facility 2. Top Secret. User Authentication. Bypass Mechanisms. CHAPTER 28. Applied Information Technology Security. Communications and Network Security. Network Protection. Hardening the Operating Environment. Client Server and Other Environments. Firewalls and Other Protection Resources. Intrusion Detection Systems. CHAPTER 29. Physical and Environmental Security. Control Mechanisms. Implementing the Controls. PART VI. Business Continuity and Disaster Recovery. CHAPTER 30. Protection of the Information Technology Architecture and Assets: Disaster Recovery Planning. Risk Reassessment. Disaster-Before and After. Consequences of Disruption. Where to Start. Testing the Plan. Auditing the Plan. CHAPTER 31. Insurance. Self-Insurance. PART VII. Advanced IS Auditing. CHAPTER 32. Auditing E-commerce Systems. E-Commerce and Electronic Data Interchange: What Is It? Opportunities and Threats. Risk Factors. Threat List. Security Technology. "Layer" Concept. Authentication. Encryption. Trading Partner Agreements. Risks and Controls within EDI and E-Commerce. Nonrepudiation. E-Commerce and Auditability. Compliance Auditing. E-Commerce Audit Approach. Audit Tools and Techniques. Auditing Security Control Structures. Computer Assisted Audit Techniques. CHAPTER 33. Auditing UNIX/Linux. History. Security and Control in a UNIX/Linux System. Architecture. UNIX Security. Services. Daemons. Auditing UNIX. Scrutiny of Logs. Audit Tools in the Public Domain. UNIX passwd File. Auditing UNIX Passwords. CHAPTER 34. Auditing Windows. History. NT and Its Derivatives. Auditing Windows 23. Password Protection. File Sharing. Security Checklist. CHAPTER 35. Foiling the System Hackers. CHAPTER 36. Investigating Information Technology Fraud. Pre-Incident Preparation. Detection of Incidents. Initial Response. Forensic Backups. Investigation. Network Monitoring. Identity Theft. APPENDICES. APPENDIX A Ethics and Standards for the IS Auditor. ISACA Code of Professional Ethics. Relationship of Standards to Guidelines and Procedures. APPENDIX B Audit Program for Application Systems Auditing. APPENDIX C Logical Access Control Audit Program. APPENDIX D Audit Program for Auditing UNIX/Linux Environments. APPENDIX E Audit Program for Auditing Windows XP/2000 Environments. Index.


Best Sellers



Product Details
  • ISBN-13: 9780470009895
  • Publisher: John Wiley and Sons Ltd
  • Publisher Imprint: John Wiley & Sons Ltd
  • Depth: 38
  • Height: 237 mm
  • No of Pages: 474
  • Series Title: English
  • Weight: 876 gr
  • ISBN-10: 0470009896
  • Publisher Date: 05 Apr 2007
  • Binding: Hardback
  • Edition: HAR/CDR
  • Language: English
  • Returnable: N
  • Spine Width: 32 mm
  • Width: 166 mm


Similar Products

How would you rate your experience shopping for books on Bookswagon?

Add Photo
Add Photo

Customer Reviews

REVIEWS           
Click Here To Be The First to Review this Product
Auditor's Guide to Information Systems Auditing: (English)
John Wiley and Sons Ltd -
Auditor's Guide to Information Systems Auditing: (English)
Writing guidlines
We want to publish your review, so please:
  • keep your review on the product. Review's that defame author's character will be rejected.
  • Keep your review focused on the product.
  • Avoid writing about customer service. contact us instead if you have issue requiring immediate attention.
  • Refrain from mentioning competitors or the specific price you paid for the product.
  • Do not include any personally identifiable information, such as full names.

Auditor's Guide to Information Systems Auditing: (English)

Required fields are marked with *

Review Title*
Review
    Add Photo Add up to 6 photos
    Would you recommend this product to a friend?
    Tag this Book
    Read more
    Does your review contain spoilers?
    What type of reader best describes you?
    I agree to the terms & conditions
    You may receive emails regarding this submission. Any emails will include the ability to opt-out of future communications.

    CUSTOMER RATINGS AND REVIEWS AND QUESTIONS AND ANSWERS TERMS OF USE

    These Terms of Use govern your conduct associated with the Customer Ratings and Reviews and/or Questions and Answers service offered by Bookswagon (the "CRR Service").


    By submitting any content to Bookswagon, you guarantee that:
    • You are the sole author and owner of the intellectual property rights in the content;
    • All "moral rights" that you may have in such content have been voluntarily waived by you;
    • All content that you post is accurate;
    • You are at least 13 years old;
    • Use of the content you supply does not violate these Terms of Use and will not cause injury to any person or entity.
    You further agree that you may not submit any content:
    • That is known by you to be false, inaccurate or misleading;
    • That infringes any third party's copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy;
    • That violates any law, statute, ordinance or regulation (including, but not limited to, those governing, consumer protection, unfair competition, anti-discrimination or false advertising);
    • That is, or may reasonably be considered to be, defamatory, libelous, hateful, racially or religiously biased or offensive, unlawfully threatening or unlawfully harassing to any individual, partnership or corporation;
    • For which you were compensated or granted any consideration by any unapproved third party;
    • That includes any information that references other websites, addresses, email addresses, contact information or phone numbers;
    • That contains any computer viruses, worms or other potentially damaging computer programs or files.
    You agree to indemnify and hold Bookswagon (and its officers, directors, agents, subsidiaries, joint ventures, employees and third-party service providers, including but not limited to Bazaarvoice, Inc.), harmless from all claims, demands, and damages (actual and consequential) of every kind and nature, known and unknown including reasonable attorneys' fees, arising out of a breach of your representations and warranties set forth above, or your violation of any law or the rights of a third party.


    For any content that you submit, you grant Bookswagon a perpetual, irrevocable, royalty-free, transferable right and license to use, copy, modify, delete in its entirety, adapt, publish, translate, create derivative works from and/or sell, transfer, and/or distribute such content and/or incorporate such content into any form, medium or technology throughout the world without compensation to you. Additionally,  Bookswagon may transfer or share any personal information that you submit with its third-party service providers, including but not limited to Bazaarvoice, Inc. in accordance with  Privacy Policy


    All content that you submit may be used at Bookswagon's sole discretion. Bookswagon reserves the right to change, condense, withhold publication, remove or delete any content on Bookswagon's website that Bookswagon deems, in its sole discretion, to violate the content guidelines or any other provision of these Terms of Use.  Bookswagon does not guarantee that you will have any recourse through Bookswagon to edit or delete any content you have submitted. Ratings and written comments are generally posted within two to four business days. However, Bookswagon reserves the right to remove or to refuse to post any submission to the extent authorized by law. You acknowledge that you, not Bookswagon, are responsible for the contents of your submission. None of the content that you submit shall be subject to any obligation of confidence on the part of Bookswagon, its agents, subsidiaries, affiliates, partners or third party service providers (including but not limited to Bazaarvoice, Inc.)and their respective directors, officers and employees.

    Accept

    New Arrivals



    Inspired by your browsing history


    Your review has been submitted!

    You've already reviewed this product!
    ASK VIDYA