|
|
|  | | Auditing Information and Cyber Security Governance
“Auditing Information and Cyber Security Governance: A Controls-Based Approach” intent is to create quality reference material for assurance service practitioners to enable addressing protection mandates.
span style="color: rgb(33, 37, 41); font-family: "open sans", Helvetica, Arial, sans-serif; font-size: 16px;">A comprehensive entity security program deploys information asset protection through stratified technological and non-technological controls. Controls are necessary for counteracting threats, opportunities, and vulnerabilities risks in a manner that reduces potential adverse effects to defined, acceptable levels. This book presents a methodological approach in the context of normative decision theory constructs and concepts with appropriate reference to standards an | |  | | IT Auditing Using a System Perspective
This book presents a methodological approach in the context of general systems theory constructs and concepts with appropriate reference to de facto and de jure auditing standards and the respective guidelines
p style="box-sizing: border-box; margin: 0px 0px 10px; color: rgb(51, 51, 51); font-family: Arial, Verdana, Helvetica, sans-serif;">As the power of computing continues to advance, companies have become increasingly dependent on technology to perform their operational requirements and to collect, process, and maintain vital data. This increasing reliance has caused information technology (IT) auditors to examine the adequacy of managerial control in information systems and related operations to assure necessary levels of effectiveness and efficiency in business processes. In order to perform a | |  | | IT Auditing: An Adaptive Process
"IT Auditing: An Adaptive Process" is a 136 page workbook designed to be a self-contained tool for learning IT audit process flexibility, while performing effective IT audits, as well as a companion product for "IT Auditing: The Process".
font size="4">“IT Auditing: An Adaptive Process” is a 136-page (8.5 wide by 11 length) workbook designed to be a self-contained tool for learning IT audit process flexibility, while performing effective IT audits, as well as a companion product for “IT Auditing: The Process.” Specifically, “IT Auditing: An Adaptive Process” is an enhanced and consolidated version of four IT audit monographs -- /font>span style="line-height: 20px; font-family: Arial, sans-serif; color: rgb(13,11,10); font-size: 18px" class="Apple-style-span">Information System | |  | | IT Auditing: Assuring Information Assets Protection
“IT Auditing: Assuring Information Assets Protection” provides a proven approach to assessing IT security frameworks, architectures, methods, and techniques. This publication converts selected audit standards and guidelines into practical applications using detailed examples and vivid graphics - including definitions of over 140 acronyms helpful in providing assurance services. This publication also allows auditors and security professionals to understand various steps and processes required to adequately initiate, document, and compile information assets protection audit or review phases.
span style="font-size: 13.5pt">The value of most organizations today resides in the information assets that provide knowledge necessary to succeed in conducting business. Many of these information assets are digitally encoded. /span>/b>br />
span style="font-size: 13.5pt">br />
Unlike physical assets, digitally encoded information assets can not be seen or touched directly. Furthermore, unlike physical assets, digitally encoded information assets can be more easily damaged or destroyed accidentally or on purpose by persons in the computer operations center or | |  | | IT Auditing: Irregular and Illegal Acts
"IT Auditing: Irregular and Illegal Acts" contains over 207 PowerPoint slides encouraging active learning regarding irregular and illegal acts associated with IT audits/reviews/agreed-upon procedures. In addition, the 56-page instructor guide and 31-page workbook are correlated to the PowerPoint presentation material for an enhanced individual or group training experience.
br />
br />
br />
br />
br />
br />
br />
br />
br />
br />
br />
br />
br />
br />
|
|
|
|
