Auditor's Guide to Information Systems Auditing - Hardcover

Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." -E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.

It has become impossible for today's enterprises of any size and in any market sector to exist without computers to assist with their fundamental business operations. The modern auditor, therefore, requires significantly more knowledge of computers and computer auditing than did auditors of earlier years. In order for organizations to take full advantage of the opportunities that computers can offer, their systems must be controlled and dependable.

Written for those who need to gain apractical working knowledge of the risks and control opportunities within an information processing (IP) environment, as well as the auditing of that environment, Auditor's Guide to Information Systems Auditing includes a complementary student's version of the IDEA Data Analysis Software CD and is particularly useful for professionals andstudents within the fields of:

• IT security
• IT audit
• Internal audit
• External audit
• Management information systems
• General business management

Emphasizing the practical implementation of principles and techniques through the use of realistic case studies, Auditor's Guide to Information Systems Auditing follows the approach used by the Information System Audit and Control Association's modelcurriculum and is an excellent study guide for those preparing for the CISA and CISM exams.

This invaluable reference manual is filled with relevant information helpful to those accountable to management for the successful implementation and control of information systems and covers a wide range of topics, serving as an indispensable introductory reference to IT auditing.