Information Technology Control and Audit, Second Edition

Senft, Sandra; Gallegos, Frederick; Manson, Daniel P.; Gonzales, Carol

ISBN 10: 0849320321 / ISBN 13: 9780849320323

Editore: Auerbach Publications, 2004

Riguardo questo articolo

Codice articolo U9780849320323

Dati bibliografici

Titolo: Information Technology Control and Audit, ...

Casa editrice: Auerbach Publications

Data di pubblicazione: 2004

Legatura: Rilegato

Condizione: Very Good

Condizione sovraccoperta: 29214035

autografato: 3/12/2024 8:58:42 PM

Edizione: 1710277122.

Descrizione articolo

Riassunto:

Information Technology Control and Audit, Second Edition is an excellent introductory textbook for IT auditing. It covers a wide range of topics in the field including the audit process, the legal environment of IT auditing, security and privacy, and much more.

This textbook first examines the foundation of IT audit and control, discussing what IT auditing involves and the guidance provided by organizations in dealing with control and auditability issues. It then analyzes the process of audit and review, explores IT governance and control, and discusses the CobiT framework and steps that align IT decisions with business strategy. This volume examines project management processes that ensure that projects are controlled from inception through integration.

It continues by addressing auditing IT acquisition and implementation, describing risks and controls as related to the life cycle of application systems. It highlights the purchase and installation of new systems, as well as change management. The next section examines the auditing of IT operations in both standalone and global environments, covering types of IT operation, issues related to specific platforms, risk and control assessment, and audit methods and support tools.

The textbook concludes with a review of emerging issues, providing undergraduate and graduate students with a thorough overview of a topic critical to organizational security and integrity.

Contenuti:

FOUNDATION FOR IT AUDIT AND CONTROL
Information Technology Environment: Why are Controls and
Audit Important?
Audit and Review: Its Role in Information Technology
The Audit Process in an Information Technology Environment
Auditing Using Computer Assisted Audit Tools and Techniques

AUDITING IT PLANNING AND ORGANIZATION
Strategy and Standards
Planning and Controlling
Project Management
Quality Management

AUDITING IT ACQUISITION AND IMPLEMENTATION
Software Acquisition
Project Implementation
Application Maintenance
Change Management

AUDITING IT OPERATIONS: FROM STANDALONE TO
GLOBAL
IT Operations Environments: Complexities and Control Issues
Operational Control Issues
Assessing Risk in IT Operations
Audit Methods and Techniques for Operations
Using Tools and Techniques In IT Operation Reviews

EMERGING ISSUES IN IT AUDIT
The Legal Environment and its Impact on Information
Technology: From IT Crime Law to IT Contract Law to
Netlaw
Security and Privacy of Information Technology: Individual to the
Intranet/Internet
IT Auditing: Career Planning and Development, Evaluating Audit
Quality and Best Practices
IT Auditing in the New Millennium

APPENDIXES
IT Audit Cases
Bibliography of Selected Publications for Information
Technology Auditors
Professional Standards and Guidance that apply to Information
Technology
Glossary
Sample Audit Programs