CISA Certified Information Systems Auditor All-in-One Exam Guide, Third Edition

Name: CISA Certified Information Systems Auditor All-in-One Exam Guide, Third Edition
Brand: McGraw Hill LLC
Price: 110.99 EUR
Availability: OnlineOnly

Peter H. Gregory(Autor*in)

McGraw Hill LLC (Verlag)

1. Auflage

Erschienen am 28. Oktober 2016

672 Seiten

E-Book

ePUB mit Adobe-DRM

Systemvoraussetzungen

E-Book

PDF mit Adobe-DRM

Systemvoraussetzungen

978-1-259-58380-3 (ISBN)

110,99 €inkl. 7% MwSt.

Systemvoraussetzungen

für ePUB mit Adobe-DRM und PDF mit Adobe-DRM

(Hinweis: Die Auswahl des von Ihnen gewünschten Dateiformats und des Kopierschutzes erfolgt erst im System des E-Book Anbieters)

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

This up-to-date self-study system offers 100% coverage of every topic on the 2016 version of the CISA examThe fully revised new edition delivers complete coverage of every topic on the latest release of the Certified Information Systems Auditor (CISA) exam. Written by an IT security and auditing expert, CISA Certified Information Systems Auditor All-in-One Exam Guide, Third Edition, covers all five exam domains developed by the Information Systems Audit and Control Association (ISACA).This effective self-study system features learning objectives at the beginning of each chapter, in-depth explanations of each topic, and accurate practice questions. Each chapter includes Exam Tips that highlight key exam information, hands-on exercises, a chapter summary that serves as a quick review, and end-of-chapter questions that simulate those on the actual exam. Designed to help you pass the CISA exam with ease, this trusted guide also serves as an ideal on-the-job reference.The latest edition of this trusted resource offers complete, up-to-date coverage of all the material included on the latest release of the Certified Information Systems Auditor exam. Written by an IT security and audit expert, CISA Certified Information Systems Auditor All-in-One Exam Guide, Third Edition covers all five exam domains developed by ISACA . You ll find learning objectives at the beginning of each chapter, exam tips, practice exam questions, and in-depth explanations. Designed to help you pass the CISA exam with ease, this comprehensive guide also serves as an essential on-the-job reference for new and established IS auditors.COVERS ALL EXAM TOPICS, INCLUDING: IT governance and management Information systems audit process Information systems life-cycle management IT service delivery and infrastructure Information asset protectionElectronic content includes: 400 practice exam questions in the Total Tester exam engine--take full-length practice exams or customizable quizzes by exam topic (Windows only)

Weitere Details

Weitere Ausgaben

Inhalt

Cover
Title Page
Copyright Page
Dedication
Contents
Acknowledgments
Introduction
Chapter 1 Becoming a CISA
Benefits of CISA Certification
The CISA Certification Process
Experience Requirements
ISACA Code of Professional Ethics
ISACA IS Standards
The Certification Exam
Exam Preparation
Before the Exam
Day of the Exam
After the Exam
Applying for CISA Certification
Retaining Your CISA Certification
Continuing Education
CPE Maintenance Fees
Revocation of Certification
CISA Exam Preparation Pointers
Summary
Chapter 2 IT Governance and Management
IT Governance Practices for Executives and Boards of Directors
IT Governance
IT Governance Frameworks
IT Strategy Committee
The Balanced Scorecard
Information Security Governance
IT Strategic Planning
The IT Steering Committee
Policies, Processes, Procedures, and Standards
Information Security Policy
Privacy Policy
Data Classification Policy
System Classification Policy
Site Classification Policy
Access Control Policy
Mobile Device Policy
Social Media Policy
Other Policies
Processes and Procedures
Standards
Applicable Laws, Regulations, and Standards
Risk Management
The Risk Management Program
The Risk Management Process
Risk Treatment
IT Management Practices
Personnel Management
Sourcing
Change Management
Financial Management
Quality Management
Portfolio Management
Controls Management
Security Management
Performance and Capacity Management
Organization Structure and Responsibilities
Roles and Responsibilities
Segregation of Duties
Business Continuity Planning
Disasters
The Business Continuity Planning Process
Developing Continuity Plans
Testing Recovery Plans
Training Personnel
Making Plans Available to Personnel When Needed
Maintaining Recovery and Continuity Plans
Sources for Best Practices
Auditing IT Governance
Auditing Documentation and Records
Auditing Contracts
Auditing Outsourcing
Auditing Business Continuity Planning
Summary
Notes
Questions
Answers
Chatper 3 The Audit Process
Audit Management
The Audit Charter
The Audit Program
Strategic Audit Planning
Audit and Technology
Audit Laws and Regulations
ISACA Auditing Standards
ISACA Code of Professional Ethics
ISACA Audit and Assurance Standards
ISACA Audit and Assurance Guidelines
Risk Analysis
Auditors' Risk Analysis and the Corporate Risk Management Program
Evaluating Business Processes
Identifying Business Risks
Risk Mitigation
Countermeasures Assessment
Monitoring
Controls
Control Classification
Internal Control Objectives
IS Control Objectives
General Computing Controls
IS Controls
Performing an Audit
Audit Objectives
Types of Audits
Compliance vs. Substantive Testing
Audit Methodology
Audit Evidence
Reliance Upon the Work of Other Auditors
Computer-Assisted Audit and Automated Work Papers
Reporting Audit Results
Other Audit Topics
Control Self-Assessment
CSA Advantages and Disadvantages
The Control Self-Assessment Life Cycle
Self-Assessment Objectives
Auditors and Self-Assessment
Implementation of Audit Recommendations
Summary
Notes
Questions
Answers
Chapter 4 IT Life Cycle Management
Benefits Realization
Portfolio and Program Management
Business Case Development
Measuring Business Benefits
Project Management
Organizing Projects
Developing Project Objectives
Managing Projects
Project Roles and Responsibilities
Project Planning
Project Management Methodologies
The System Development Life Cycle (SDLC)
SDLC Phases
Software Development Risks
Alternative Software Development Approaches and Techniques
System Development Tools
Acquiring Cloud-Based Infrastructure and Applications
Infrastructure Development and Implementation
Review of Existing Architecture
Requirements
Design
Procurement
Testing
Implementation
Maintenance
Maintaining Information Systems
Change Management
Configuration Management
Business Processes
The Business Process Life Cycle (BPLC) and Business Process Reengineering (BPR)
Capability Maturity Models
Managing Third Parties
Risk Factors
Onboarding and Due Diligence
Classification
Assessment
Remediation
Enterprise Architecture
The Zachman Framework
Data Flow Diagrams
Application Controls
Input Controls
Processing Controls
Output Controls
Auditing the System Development Life Cycle
Auditing Project Management
Auditing the Feasibility Study
Auditing Requirements
Auditing Design
Auditing Software Acquisition
Auditing Development
Auditing Testing
Auditing Implementation
Auditing Post-Implementation
Auditing Change Management
Auditing Configuration Management
Auditing Business Controls
Auditing Application Controls
Transaction Flow
Observations
Data Integrity Testing
Testing Online Processing Systems
Auditing Applications
Continuous Auditing
Auditing Third-Party Management
Summary
Notes
Questions
Answers
Chapter 5 IT Service Delivery and Infrastructure
Information Systems Operations
Management and Control of Operations
IT Service Management
IT Operations and Exception Handling
End-User Computing
Software Program Library Management
Quality Assurance
Security Management
Media Control
Data Management
Information Systems Hardware
Computer Usage
Computer Hardware Architecture
Hardware Maintenance
Hardware Monitoring
Information Systems Architecture and Software
Computer Operating Systems
Data Communications Software
File Systems
Database Management Systems
Media Management Systems
Utility Software
Software Licensing
Digital Rights Management
Network Infrastructure
Enterprise Architecture
Network Architecture
Network-Based Services
Network Models
Network Technologies
Local Area Networks
Wide Area Networks
Wireless Networks
TCP/IP Protocols and Devices
The Global Internet
Network Management
Networked Applications
Disaster Recovery Planning
Disaster Response Teams' Roles and Responsibilities
Recovery Objectives
Developing Recovery Strategies
Developing Recovery Plans
Data Backup and Recovery
Testing DR Plans
Auditing IT Infrastructure and Operations
Auditing Information Systems Hardware
Auditing Operating Systems
Auditing File Systems
Auditing Database Management Systems
Auditing Network Infrastructure
Auditing Network Operating Controls
Auditing IT Operations
Auditing Lights-Out Operations
Auditing Problem Management Operations
Auditing Monitoring Operations
Auditing Procurement
Auditing Disaster Recovery Planning
Summary
Notes
Questions
Answers
Chapter 6 Information Asset Protection
Information Security Management
Aspects of Information Security Management
Roles and Responsibilities
Business Alignment
Asset Inventory and Classification
Access Controls
Privacy
Third-Party Management
Human Resources Security
Computer Crime
Security Incident Management
Forensic Investigations
Logical Access Controls
Access Control Concepts
Access Control Models
Access Control Threats
Access Control Vulnerabilities
Access Points and Methods of Entry
Identification, Authentication, and Authorization
Protecting Stored Information
Managing User Access
Protecting Mobile Computing
Network Security Controls
Network Security
Securing Client-Server Applications
Securing Wireless Networks
Protecting Internet Communications
Encryption
Voice over IP
Private Branch Exchange (PBX)
Malware
Information Leakage
Environmental Controls
Environmental Threats and Vulnerabilities
Environmental Controls and Countermeasures
Physical Security Controls
Physical Access Threats and Vulnerabilities
Physical Access Controls and Countermeasures
Auditing Asset Protection
Auditing Security Management
Auditing Logical Access Controls
Auditing Network Security Controls
Auditing Environmental Controls
Auditing Physical Security Controls
Summary
Notes
Questions
Answers
Appendix A Conducting a Professional Audit
Understanding the Audit Cycle
How the Information Systems Audit Cycle Is Discussed
"Client" and Other Terms in This Appendix
Overview of the IS Audit Cycle
Project Origination
Engagement Letters and Audit Charters
Ethics and Independence
Launching a New Project: Planning an Audit
Developing the Audit Plan
Developing a Test Plan
Performing a Pre-Audit (or "Readiness Assessment")
Organizing a Testing Plan
Resource Planning for the Audit Team
Performing Control Testing
Developing Audit Opinions
Developing Audit Recommendations
Managing Supporting Documentation
Delivering Audit Results
Management Response
Audit Closing Procedures
Audit Follow-up
Summary
Appendix B Popular Methodologies, Frameworks, and Guidance
Common Terms and Concepts
Governance
Goals, Objectives, and Strategies
Processes
Capability Maturity Models
Controls
The Deming Cycle
Projects
Frameworks, Methodologies, and Guidance
Business Model for Information Security (BMIS)
COSO Internal Control - Integrated Framework
COBIT
GTAG
GAIT
ISF Standard of Good Practice for Information Security
ISO/IEC 27001 and 27002
ITAF
ITIL
PMBOK Guide
PRINCE2
Risk IT
Val IT
Summary of Frameworks
Pointers for Successful Use of Frameworks
Notes
References
Appendix C About the Download
System Requirements
Installing and Running Total Tester
Total Tester Premium Practice Exam Software
Technical Support
Glossary
Index

Systemvoraussetzungen

Dateiformat: ePUB
Kopierschutz: Adobe-DRM (Digital Rights Management)

Systemvoraussetzungen:

Computer (Windows; MacOS X; Linux): Installieren Sie bereits vor dem Download die kostenlose Software Adobe Digital Editions (siehe E-Book Hilfe).
Tablet/Smartphone (Android; iOS): Installieren Sie bereits vor dem Download die kostenlose App Adobe Digital Editions oder die App PocketBook (siehe E-Book Hilfe).
E-Book-Reader: Bookeen, Kobo, Pocketbook, Sony, Tolino u.v.a.m. (nicht Kindle)

Das Dateiformat ePUB ist sehr gut für Romane und Sachbücher geeignet – also für „fließenden” Text ohne komplexes Layout. Bei E-Readern oder Smartphones passt sich der Zeilen- und Seitenumbruch automatisch den kleinen Displays an.
Mit Adobe-DRM wird hier ein „harter” Kopierschutz verwendet. Wenn die notwendigen Voraussetzungen nicht vorliegen, können Sie das E-Book leider nicht öffnen. Daher müssen Sie bereits vor dem Download Ihre Lese-Hardware vorbereiten.

Bitte beachten Sie: Wir empfehlen Ihnen unbedingt nach Installation der Lese-Software diese mit Ihrer persönlichen Adobe-ID zu autorisieren!

Weitere Informationen finden Sie in unserer E-Book Hilfe.

Dateiformat: PDF
Kopierschutz: Adobe-DRM (Digital Rights Management)

Systemvoraussetzungen:

Computer (Windows; MacOS X; Linux): Installieren Sie bereits vor dem Download die kostenlose Software Adobe Digital Editions (siehe E-Book Hilfe).
Tablet/Smartphone (Android; iOS): Installieren Sie bereits vor dem Download die kostenlose App Adobe Digital Editions oder die App PocketBook (siehe E-Book Hilfe).
E-Book-Reader: Bookeen, Kobo, Pocketbook, Sony, Tolino u.v.a.m. (nicht Kindle)

Das Dateiformat PDF zeigt auf jeder Hardware eine Buchseite stets identisch an. Daher ist eine PDF auch für ein komplexes Layout geeignet, wie es bei Lehr- und Fachbüchern verwendet wird (Bilder, Tabellen, Spalten, Fußnoten). Bei kleinen Displays von E-Readern oder Smartphones sind PDF leider eher nervig, weil zu viel Scrollen notwendig ist.
Mit Adobe-DRM wird hier ein „harter” Kopierschutz verwendet. Wenn die notwendigen Voraussetzungen nicht vorliegen, können Sie das E-Book leider nicht öffnen. Daher müssen Sie bereits vor dem Download Ihre Lese-Hardware vorbereiten.

Bitte beachten Sie: Wir empfehlen Ihnen unbedingt nach Installation der Lese-Software diese mit Ihrer persönlichen Adobe-ID zu autorisieren!

Weitere Informationen finden Sie in unserer E-Book Hilfe.

Als PDF speichern Als Link merken