Read more
Introduction. Self-Assessment. 1. The Information Systems (IS) Audit Process. Conducting IS Audits in Accordance with Generally Accepted IS Audit Standards and Guidelines. ISACA IS Auditing Standards and Guidelines and Code of Professional Ethics. Auditing Standards Explained. The ISACA Code of Professional Ethics. Ensuring That the Organizations Information Technology and Business Systems are Adequately Controlled, Monitored, and Assessed. ISACAs CobiT Framework. Control Self-Assessment. Risk-Based IS Audit Strategy and Objectives. Aligning Controls with the Organizations Business Objectives. Steering Committee. Strategic Planning. Organizational Structure. IT Department Head. Security Department. Quality Assurance. Applications. Data Management. Technical Support. Operations. Segregation of Duties. IS Auditing Practices and Techniques. Audit Planning and Management Techniques. Information Systems Audits. Attestation. Findings and Recommendations. SAS 70. SAS 94. Attribute Sampling. Variable Sampling. Substantive Tests. Compliance Tests. Audit Conclusions. Obtaining Evidence. Organizations Use of System Platforms, IT Infrastructure, and Applications. Techniques to Gather Information and Preserve Evidence. Control Objectives and Controls Related to IS (Such as Preventative and Detective). Reviewing the Audit. Communicating Audit Results. Facilitating Risk Management and Control Practices. IS, Business, and Audit Risk (Such as Threats and Impacts). Risk-Analysis Methods, Principles, and Criteria. Communication Techniques. Personnel-Management Techniques. Practice Questions. 2. Management, Planning, and Organization of IS. Strategy, Policies, Standards, and Procedures. Strategic Planning. IS Steering Committee. The Components of IS Strategies, Policies, Standards, and Procedures. Policy Development. IT Policy. Procedures. Evaluating IS Management Practices to Ensure Compliance with IS Policies, Standards, and Procedures. Evaluating the Process for Strategy Development, Deployment, and Maintenance. Principles of IS Organizational Structure and Design. Evaluating IS Organization and Structure. Evaluating Use of Third-P...
