Features
- Cover Type: Hard Cover with 430 pages
- Published by: Wiley
- Edition: 2nd Edition February 24, 2003
- Written in: English
- ISBN 10 Number: 0471281174
- ISBN 13 Number: 978-0471281177
-
Book Dimensions:
9.3 x 6.2 x 1.5 inches
- Weighs: 2 pounds
Product Description
Have you been asked to perform an information systems audit and don't know where to start? Examine a company's hardware, software, and data organization and processing methods to ensure quality control and security with this easy, practical guide to auditing computer systems--the tools necessary to implement an effective IS audit. In nontechnical language and following the format of an IS audit program, you'll gain insight into new types of security certifications (e.g., TruSecure, CAP SysTrust, CPA WebTrust) as well as the importance of physical security controls, adequate insurance, and digital surveillance systems.
Order your copy today!
Book Info
Text explains how to audit the controls and security over all types of information systems environments. Provides a detailed examination of contemporary auditing issues. Previous edition: c1998.
Reader ReviewsThis is a readable and current introduction to information systems auditing from a qualified and experienced IS auditor. The book consists of three parts. Part One introduces core information systems concepts and is aimed at readers without much background in IS; Part Two introduces IS audit itself, and Part Three discusses some additional concepts and issues, such as control self-assessment and the human factor. Case studies are extensively used throughout the book to illustrate concepts, approaches and procedures discussed in the text. While the author is writing from a US perspective and has US work experience, references to British, Canadian, and Australian standards, qualifications and practices are included. One of the good characteristics of this book is its readability and easy flow of information, unlike many other works in this field. I haven't given this book five stars because in my opinion its coverage of "information systems" is somewhat limited compared with the coverage of "auditing". So if you are looking for a detailed technical volume on information systems auditing, look elsewhere; this book gives a well-rounded non-technical introduction to information systems auditing and does it well.