Auditing Information Systems

Preface.
Acknowledgments.
PART ONE: CORE CONCEPTS.
Chapter 1. Basics of Computing Systems.
Chapter 2. Identifying Computer Systems.
PART TWO: STANDARD INFORMATION SYSTEMS AUDIT APPROACH.
Chapter 3. Information Systems Audit Program.
Chapter 4. Information Systems Security Policies, Standards,and/or Guidelines.
Chapter 5. Auditing Service Organization Applications.
Chapter 6. Assessing the Financial Stability of VendorOrganizations, Examining Vendor Organization Contracts, andExamining Accounting Treatment of Computer Equipment andSoftware.
Chapter 7. Physical Security.
Chapter 8. Logical Security.
Chapter 9. Information Systems Operations.
PART THREE: CONTEMPORARY INFORMATION SYSTEMS AUDITINGCONCEPTS.
Chapter 10. Control Self-Assessment and an Application in anInformation Systems Environment.
Chapter 11. Encryption and Cryptography.
Chapter 12. Computer Forensics.
Chapter 13. Other Contemporary Information Systems AuditingChallenges.
Chapter 14. Humanistic Aspects of Information SystemsAuditing.
Chapter 15. Information Systems Project Management Audits.
Chapter 16. Conclusion.
Appendix A: Professional Auditing Associations and OtherOrganizations Related to Information Systems Auditing and ComputerSecurity.
Appendix B: Common Criteria for Information Technology SecurityEvaluation.
Appendix C: The International Organization for Standardization:Seven-Layer Open Systems Interconnection Reference Model.
Selected References.
Glossary.
Index.