05600nam 2200745Ia 450 991082007180332120200520144314.01-119-20372-41-118-23907-51-280-58854-397866136183751-118-22584-8(CKB)2670000000148575(EBL)818101(OCoLC)777374796(SSID)ssj0000614149(PQKBManifestationID)11931533(PQKBTitleCode)TC0000614149(PQKBWorkID)10587960(PQKB)11544133(Au-PeEL)EBL818101(CaPaEBR)ebr10534006(CaONFJC)MIL361837(OCoLC)785782707(CaSebORM)9781118147610(MiAaPQ)EBC818101(EXLCZ)99267000000014857520111012d2012 uy 0engur|n|---|||||txtccrAuditor's guide to IT auditing[electronic resource] /Richard E. Cascarino2nd ed.Hoboken, N.J. Wileyc20121 online resource (456 p.)Wiley corporate F&A seriesRev. ed. of: Auditor's guide to information systems auditing.Includes index.1-118-14761-8 Includes bibliographical references and index.Auditor's Guide to IT Auditing; Contents; Preface; PART I: IT AUDIT PROCESS; Chapter 1: Technology and Audit; Technology and Audit; Batch and Online Systems; Electronic Data Interchange; Electronic Business; Cloud Computing; Chapter 2: IT Audit Function Knowledge; Information Technology Auditing; What Is Management?; Management Process; Understanding the Organization's Business; Establishing the Needs; Identifying Key Activities; Establish Performance Objectives; Decide the Control Strategies; Implement and Monitor the Controls; Executive Management's Responsibility and Corporate GovernanceAudit RoleConceptual Foundation; Professionalism within the IT Auditing Function; Relationship of Internal IT Audit to the External Auditor; Relationship of IT Audit to Other Company Audit Activities; Audit Charter; Charter Content; Outsourcing the IT Audit Activity; Regulation, Control, and Standards; Chapter 3: IT Risk and Fundamental Auditing Concepts; Computer Risks and Exposures; Effect of Risk; Audit and Risk; Audit Evidence; Conducting an IT Risk-Assessment Process; NIST SP 800 30 Framework; ISO 27005; The "Cascarino Cube"; Reliability of Audit Evidence; Audit Evidence ProceduresResponsibilities for Fraud Detection and PreventionNotes; Chapter 4: Standards and Guidelines for IT Auditing; IIA Standards; Code of Ethics; Advisory; Aids; Standards for the Professional Performance of Internal Auditing; ISACA Standards; ISACA Code of Ethics; COSO: Internal Control Standards; BS 7799 and ISO 17799: IT Security; NIST; BSI Baselines; Note; Chapter 5: Internal Controls Concepts Knowledge; Internal Controls; Cost/Benefit Considerations; Internal Control Objectives; Types of Internal Controls; Systems of Internal Control; Elements of Internal ControlManual and Automated SystemsControl Procedures; Application Controls; Control Objectives and Risks; General Control Objectives; Data and Transactions Objectives; Program Control Objectives; Corporate IT Governance; COSO and Information Technology; Governance Frameworks; Notes; Chapter 6: Risk Management of the IT Function; Nature of Risk; Risk-Analysis Software; Auditing in General; Elements of Risk Analysis; Defining the Audit Universe; Computer System Threats; Risk Management; Notes; Chapter 7: Audit Planning Process; Benefits of an Audit Plan; Structure of the Plan; Types of AuditChapter 8: Audit ManagementPlanning; Audit Mission; IT Audit Mission; Organization of the Function; Staffing; IT Audit as a Support Function; Planning; Business Information Systems; Integrated IT Auditor versus Integrated IT Audit; Auditees as Part of the Audit Team; Application Audit Tools; Advanced Systems; Specialist Auditor; IT Audit Quality Assurance; Chapter 9: Audit Evidence Process; Audit Evidence; Audit Evidence Procedures; Criteria for Success; Statistical Sampling; Why Sample?; Judgmental (or Non-Statistical) Sampling; Statistical Approach; Sampling Risk; Assessing Sampling RiskPlanning a Sampling ApplicationStep-by-step guide to successful implementation and control of IT systems-including the Cloud Many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Now in a Second Edition, Auditor's Guide to IT Auditing presents an easy, practical guide for auditors that can be applied to all computing environments.Follows the approach used by the Information System Audit and Control Association's model curriculum, making this book a practical approach to IS auditingServWiley Corporate F&AElectronic data processingAuditingAuditingElectronic data processingAuditing.Auditing.658/.0558BUS003000bisacshCascarino Richard1659325Cascarino Richard1659325MiAaPQMiAaPQMiAaPQBOOK9910820071803321Auditor's guide to IT auditing4013911UNINA