IT Auditing

IT Auditing: Assuring Information Assets Protection provides a proven approach to assessing IT security frameworks, architectures, methods, and techniques. This publication converts selected audit standards and guidelines into practical applications using detailed examples and vivid graphics - including definitions of over 140 acronyms helpful in auditing and reviewing. This publication also allows auditors and security professionals to understand various steps and processes required to adequately initiate, document, and compile information assets protection audit or review phases.
The value of most organizations today is in the invisible information assets that provide key knowledge necessary to succeed in conducting business. Many of these information assets are digital.

Unlike physical assets, information assets can not be seen or touched directly. Unlike physical assets information assets can be more easily damaged or destroyed accidentally or on purpose by persons in the computer room, in the organization, or an unknown person half way around the world. The nature of these information assets requires extremely close scrutiny.

This 265-page publication provides auditors and security professionals with an appreciation for the complexities associated with assuring information assets protection and lists numerous references for further in-depth information.

IT Auditing: Assuring Information Assets Protection can function as a study guide for CISA or CISM examination preparation as well as an audit or security practice reference manual. Robert offers this information to assist auditors and security professionals in meeting the challenges of helping to assure the protection of these assets.