Auditor's Guide to Information Systems Auditing

Features

• Cover Type: Hard Cover with 512 pages
• Published by: Wiley March 23, 2007
• Written in: English
• ISBN 10 Number: 0470009896
• ISBN 13 Number: 978-0470009895
• Book Dimensions: 9.1 x 6.2 x 1.6 inches
• Weighs: 1.4 pounds

Product Description
Praise for Auditor's Guide to Information Systems Auditing

"Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are looking at the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job."
—E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower software

A step-by-step guide tosuccessful implementation and control of information systems

More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments.

As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.

From the Inside Flap
It has become impossible for today's enterprises of any size and in any market sector to exist without computers to assist with their fundamental business operations. The modern auditor, therefore, requires significantly more knowledge of computers and computer auditing than did auditors of earlier years. In order for organizations to take full advantage of the opportunities that computers can offer, their systems must be controlled and dependable.

Written for those who need to gain apractical working knowledge of the risks and control opportunities within an information processing (IP) environment, as well as the auditing of that environment, Auditor's Guide to Information Systems Auditing includes a complementary student's version of the IDEA Data Analysis software CD and is particularly useful for professionals andstudents within the fields of:

• IT security
• IT audit
• Internal audit
• External audit
• Management information systems
• General business management

Emphasizing the practical implementation of principles and techniques through the use of realistic case studies, Auditor's Guide to Information Systems Auditing follows the approach used by the Information System Audit and Control Association's modelcurriculum and is an great study guide for those preparing for the CISA and CISM exams.

This invaluable reference manual is filled with relevant information helpful to those accountable to management for the successful implementation and control of information systems and covers a wide range of topics, serving as an indispensable introductory reference to IT auditing.

Reader Reviews
I think this book is waste of money. It's full of water and just a collections of facts about IS audit. Some author's statements are pretty strange - p.304-305 of the book (encryption weaknesses) the author says: "Availability of algorithms makes secure encryption difficult. Most of commonly used algorithms are published and available...". Everyone knows that strength of encryption is not in secrecy of encryption algorithms. August Kerckhoff wrote (Kerckhoff's law) that "a cryptosystem should be secure even if everything about the system, except the key, is public knowledge".... In my opinion, if you want to read something about IS audit better to choose CISA study guide.