Auditor's Guide to IT Auditing

Part - I: IT Audit Process
Technology and Audit
IT Audit Function Knowledge
IT Risk and Fundamental Auditing Concepts
Standards and Guidelines for IT Auditing
Internal Controls Concepts Knowledge
Risk Management of the IT Function
Audit Planning Process
Audit Management
Audit Evidence Process
Audit Reporting Follow-Up
Part – II: Information Technology Governance
Management
Strategic Planning
Management Issues
Support Tools and Frameworks
Governance Techniques
Part – III: Systems and Infrastructure Lifecycle Management
Information Systems Planning
Information Management Usage
Development, Acquisition, and Maintenance of Information Systems
Impact of Information Technology on the Business Processes and Solutions
Software Development
Audit and Control of Purchased Packages and Services
Audit Role in Feasibility Studies and Conversions
Audit and Development of Application Controls
Part – IV: Information Technology Service Delivery and Support
Technical Infrastructure
Service – Centre Management
Part – V: Protection of Information Assets
Information Assets Security Management
Logical Information Technology Security
Applied Information Technology Security
Physical and Environmental Security
Part – VI: Business Continuity and Disaster Recovery
Protection of the Information Technology Architecture and Assets: Disaster – Recovery Planning
Displacement Control
Part – VII: Advance IT Auditing
Auditing E-Commerce Systems
Auditing UNIX/LINUX
Auditing Windows VISTA and Windows 7
Foiling the System Hackers
Preventing and investigating Information Technology Fraud
Appendix – A: Ethics and Standards for the IS Auditor
Appendix – B: Audit Program for Application Systems Auditing
Appendix – C: Logical Access Control Audit Program
Appendix – D: Audit Program for Auditing UNIX/Linux Environments
Appendix – E: Audit Program for Auditing Windows VISTA and Windows 7 Environments
About the Author
About the Website
Index