Sale!

IT Auditing Using Controls to Protect Information Assets 3rd edition by Chris Davis, Mike Schiller, Kevin Wheeler 1260453235 9781260453232

Original price was: $70.00.Current price is: $24.99.

Instant download IT Auditing Using Controls to Protect Information Assets 3rd after payment

SKU: EB_96094 Category:

IT Auditing Using Controls to Protect Information Assets 3rd edition by Chris Davis, Mike Schiller, Kevin Wheeler – Ebook PDF Instand Download/DeliveryISBN: 1260453235, 9781260453232
Full dowload IT Auditing Using Controls to Protect Information Assets 3rd edition after payment

Product details:

ISBN-10 : 1260453235 

ISBN-13 : 9781260453232

Author: Chris Davis, Mike Schiller, Kevin Wheeler

Secure Your Systems Using the Latest IT Auditing Techniques Fully updated to cover leading-edge tools and technologies, IT Auditing: Using Controls to Protect Information Assets, Third Edition, explains, step by step, how to implement a successful, enterprise-wide IT audit program. New chapters on auditing cybersecurity programs, big data and data repositories, and new technologies are included. This comprehensive guide describes how to assemble an effective IT audit team and maximize the value of the IT audit function. In-depth details on performing specific audits are accompanied by real-world examples, ready-to-use checklists, and valuable templates. Standards, frameworks, regulations, and risk management techniques are also covered in this definitive resource.

 

IT Auditing Using Controls to Protect Information Assets 3rd Table of contents:

  1. Part I Audit Overview
  2. Chapter 1 Building an Effective Internal IT Audit Function
  3. Why Are We Here? (The Internal Audit Department’s Mission)
  4. Independence: The Great Myth
  5. Adding Value Outside of Formal Audits
  6. Business Advisory Audits
  7. Four Methods for Business Advisory Audits
  8. Early Involvement
  9. Informal Audits
  10. Knowledge Sharing
  11. Self-Assessments
  12. Continuous Auditing
  13. Final Thoughts on Adding Value Outside of Formal Audits
  14. Relationship Building: Partnering vs. Policing
  15. Learning to Build Partnerships
  16. The Role of the IT Audit Team
  17. Application Auditors (or Integrated Auditors)
  18. Data Extraction and Analysis Specialists
  19. IT Auditors
  20. Forming and Maintaining an Effective IT Audit Team
  21. Career IT Auditors
  22. IT Professionals
  23. Career IT Auditors vs. IT Professionals: Final Thoughts
  24. Co-sourcing
  25. Maintaining Expertise
  26. Sources of Learning
  27. Relationship with External Auditors and Internal Assurance Functions
  28. Summary
  29. Chapter 2 The Audit Process
  30. Internal Controls
  31. Types of Internal Controls
  32. Internal Control Examples
  33. Determining What to Audit
  34. Creating the Audit Universe
  35. Ranking the Audit Universe
  36. Determining What to Audit: Final Thoughts
  37. The Stages of an Audit
  38. Planning
  39. Fieldwork and Documentation
  40. Issue Discovery and Validation
  41. Solution Development
  42. Report Drafting and Issuance
  43. Issue Tracking
  44. Standards
  45. Summary
  46. Part II Auditing Techniques
  47. Chapter 3 Auditing Entity-Level Controls
  48. Background
  49. Test Steps for Auditing Entity-Level Controls
  50. Knowledge Base
  51. Master Checklist
  52. Chapter 4 Auditing Cybersecurity Programs
  53. Background
  54. Steps for Auditing Cybersecurity Programs
  55. Knowledge Base
  56. Master Checklist
  57. Chapter 5 Auditing Data Centers and Disaster Recovery
  58. Background
  59. Data Center Auditing Essentials
  60. Physical Security and Environmental Controls
  61. System and Site Resiliency
  62. Data Center Operations
  63. Disaster Preparedness
  64. Test Steps for Auditing Data Centers
  65. Neighborhood and External Risk Factors
  66. Physical Access Controls
  67. Environmental Controls
  68. Power and Electricity
  69. Fire Suppression
  70. Data Center Operations
  71. System Resiliency
  72. Data Backup and Restoration
  73. Disaster Recovery Planning
  74. Knowledge Base
  75. Master Checklists
  76. Chapter 6 Auditing Networking Devices
  77. Background
  78. Network Auditing Essentials
  79. Protocols
  80. OSI Model
  81. Routers and Switches
  82. LANs, VLANs, WANs, and WLANs
  83. Firewalls
  84. Auditing Switches, Routers, and Firewalls
  85. General Network Equipment Audit Steps
  86. Additional Switch Controls: Layer 2
  87. Additional Router Controls: Layer 3
  88. Additional Firewall Controls
  89. Additional Controls for Wireless Network Gear
  90. Tools and Technology
  91. Knowledge Base
  92. Master Checklists
  93. Chapter 7 Auditing Windows Servers
  94. Background
  95. Windows Auditing Essentials
  96. Command-Line Tips
  97. Essential Command-Line Tools
  98. Common Commands
  99. Server Administration Tools
  100. Performing the Audit
  101. Test Steps for Auditing Windows
  102. Initial Steps
  103. Account Management
  104. Permissions Management
  105. Network Security and Controls
  106. Security Monitoring and Other General Controls
  107. Tools and Technology
  108. Knowledge Base
  109. Master Checklist
  110. Chapter 8 Auditing Unix and Linux Operating Systems
  111. Background
  112. Unix and Linux Auditing Essentials
  113. Key Concepts
  114. File System Layout and Navigation
  115. File System Permissions
  116. Users and Authentication
  117. Network Services
  118. Test Steps for Auditing Unix and Linux
  119. Account Management
  120. Permissions Management
  121. Network Security and Controls
  122. Security Monitoring and Other General Controls
  123. Tools and Technology
  124. Network Vulnerability Scanners
  125. NMAP
  126. Malware Detection Tools
  127. Tools for Validating Password Strength
  128. Host-Based Vulnerability Scanners
  129. Shell/Awk/etc
  130. Knowledge Base
  131. Master Checklists
  132. Chapter 9 Auditing Web Servers and Web Applications
  133. Background
  134. Web Auditing Essentials
  135. One Audit with Multiple Components
  136. Part 1: Test Steps for Auditing the Host Operating System
  137. Part 2: Test Steps for Auditing Web Servers
  138. Part 3: Test Steps for Auditing Web Applications
  139. Additional Steps for Auditing Web Applications
  140. Tools and Technology
  141. Knowledge Base
  142. Master Checklists
  143. Chapter 10 Auditing Databases
  144. Background
  145. Database Auditing Essentials
  146. Common Database Vendors
  147. Database Components
  148. NoSQL Database Systems
  149. Test Steps for Auditing Databases
  150. Initial Steps
  151. Operating System Security
  152. Account Management
  153. Permissions Management
  154. Data Encryption
  155. Security Log Monitoring and Management
  156. Tools and Technology
  157. Auditing Tools
  158. Monitoring Tools
  159. Encryption Tools
  160. Knowledge Base
  161. Master Checklist
  162. Chapter 11 Auditing Big Data and Data Repositories
  163. Background
  164. Big Data and Data Repository Auditing Essentials
  165. Test Steps for Auditing Big Data and Data Repositories
  166. Knowledge Base
  167. Master Checklist
  168. Chapter 12 Auditing Storage
  169. Background
  170. Storage Auditing Essentials
  171. Key Storage Components
  172. Key Storage Concepts
  173. Test Steps for Auditing Storage
  174. Initial Steps
  175. Account Management
  176. Storage Management
  177. Encryption and Permissions Management
  178. Security Monitoring and Other General Controls
  179. Knowledge Base
  180. Master Checklists
  181. Chapter 13 Auditing Virtualized Environments
  182. Background
  183. Commercial and Open-Source Projects
  184. Virtualization Auditing Essentials
  185. Test Steps for Auditing Virtualization
  186. Initial Steps
  187. Account Management and Resource Provisioning/Deprovisioning
  188. Virtual Environment Management
  189. Security Monitoring and Additional Security Controls
  190. Knowledge Base
  191. Hypervisors
  192. Tools
  193. Master Checklists
  194. Chapter 14 Auditing End-User Computing Devices
  195. Background
  196. Part 1: Auditing Windows and Mac Client Systems
  197. Windows and Mac Auditing Essentials
  198. Test Steps for Auditing Windows and Mac Client Systems
  199. Tools and Technology
  200. Knowledge Base
  201. Part 2: Auditing Mobile Devices
  202. Mobile Device Auditing Essentials
  203. Test Steps for Auditing Mobile Devices
  204. Additional Considerations
  205. Tools and Technology
  206. Knowledge Base
  207. Master Checklists
  208. Chapter 15 Auditing Applications
  209. Background
  210. Application Auditing Essentials
  211. Test Steps for Auditing Applications
  212. Input Controls
  213. Interface Controls
  214. Audit Trails and Security Monitoring
  215. Account Management
  216. Permissions Management
  217. Software Change Controls
  218. Backup and Recovery
  219. Data Retention and Classification and User Involvement
  220. Operating System, Database, and Other Infrastructure Controls
  221. Master Checklists
  222. Chapter 16 Auditing Cloud Computing and Outsourced Operations
  223. Background
  224. Cloud Computing and Outsourced Operations Auditing Essentials
  225. IT Systems, Software, and Infrastructure Outsourcing
  226. IT Service Outsourcing
  227. Other Considerations for IT Service Outsourcing
  228. Third-Party Reports and Certifications
  229. Test Steps for Auditing Cloud Computing and Outsourced Operations
  230. Initial Steps
  231. Vendor Selection and Contracts
  232. Account Management and Data Security
  233. Operations and Governance
  234. Legal Concerns and Regulatory Compliance
  235. Tools and Technology
  236. Knowledge Base
  237. Master Checklist
  238. Chapter 17 Auditing Company Projects
  239. Background
  240. Project Auditing Essentials
  241. High-Level Goals of a Project Audit
  242. Basic Approaches to Project Auditing
  243. Waterfall and Agile Software Development Methodologies
  244. Seven Major Parts of a Project Audit
  245. Test Steps for Auditing Company Projects
  246. Overall Project Management
  247. Project Startup, Requirements Gathering, and Initial Design
  248. Detailed Design and System Development
  249. Testing
  250. Implementation
  251. Training
  252. Project Wrap-Up
  253. Knowledge Base
  254. Master Checklists
  255. Chapter 18 Auditing New/Other Technologies
  256. Background
  257. New/Other Technology Auditing Essentials
  258. Generalized Frameworks
  259. Best Practices
  260. Test Steps for Auditing New and Other Technologies
  261. Initial Steps
  262. Account Management
  263. Permissions Management
  264. Network Security and Controls
  265. Security Monitoring and Other General Controls
  266. Master Checklists
  267. Part III Frameworks, Standards, Regulations, and Risk Management
  268. Chapter 19 Frameworks and Standards
  269. Introduction to Internal IT Controls, Frameworks, and Standards
  270. COSO
  271. COSO Definition of Internal Control
  272. Key Concepts of Internal Control
  273. Internal Control–Integrated Framework
  274. Enterprise Risk Management–Integrated Framework
  275. Relationship Between Internal Control and Enterprise Risk Management Publications
  276. IT Governance
  277. IT Governance Maturity Model
  278. COBIT
  279. ITIL
  280. ITIL Concepts
  281. ISO 27001
  282. ISO 27001 Concepts
  283. NIST Cyber Security Framework
  284. NSA INFOSEC Assessment Methodology
  285. NSA INFOSEC Assessment Methodology Concepts
  286. Pre-assessment Phase
  287. Onsite Activities Phase
  288. Post-assessment Phase
  289. Frameworks and Standards Trends
  290. Knowledge Base
  291. Chapter 20 Regulations
  292. An Introduction to Legislation Related to Internal Controls
  293. Regulatory Impact on IT Audits
  294. History of Corporate Financial Regulation
  295. The Sarbanes-Oxley Act of 2002
  296. SOX’s Impact on Public Corporations
  297. Core Points of the SOX Act
  298. SOX’s Impact on IT Departments
  299. SOX Considerations for Companies with Multiple Locations
  300. Impact of Third-Party Services on SOX Compliance
  301. Specific IT Controls Required for SOX Compliance
  302. The Financial Impact of SOX Compliance on Companies
  303. Gramm-Leach-Bliley Act
  304. GLBA Requirements
  305. Federal Financial Institutions Examination Council
  306. General Data Protection Regulation
  307. Additional Privacy Regulations
  308. California Security Breach Information Act (SB 1386)
  309. California Consumer Privacy Act
  310. Canadian Personal Information Protection and Electronic Documentation Act
  311. Privacy Law Trends
  312. Health Insurance Portability and Accountability Act
  313. HIPAA Privacy and Security Rules
  314. The HITECH Act
  315. HIPAA’s Impact on Covered Entities
  316. EU Commission and Basel II
  317. Basel II Capital Accord
  318. Payment Card Industry Data Security Standard
  319. PCI Impact on the Payment Card Industry
  320. Other Regulatory Trends
  321. Knowledge Base
  322. Chapter 21 Risk Management
  323. Benefits of Risk Management
  324. Risk Management from an Executive Perspective
  325. Quantitative vs. Qualitative Risk Analysis
  326. Quantitative Risk Analysis
  327. Elements of Risk
  328. Practical Application
  329. Addressing Risk

 

People also search for IT Auditing Using Controls to Protect Information Assets 3rd:

it audit controls examples
    
it audit control and security
    
it audit controls
    
it auditing using controls to protect information assets third edition
    
what is information security auditing

Reviews

There are no reviews yet.

Be the first to review “IT Auditing Using Controls to Protect Information Assets 3rd edition by Chris Davis, Mike Schiller, Kevin Wheeler 1260453235 9781260453232”