Cover image for IT auditing : using controls to protect information assets
Title:
IT auditing : using controls to protect information assets
Personal Author:
Davis, Chris (Christopher Michael)
Edition:
2nd ed.
Publication Information:
New York : McGraw-Hill, c2011
Physical Description:
xxix, 480 p. : ill. ; 24 cm.
ISBN:
9780071742382
Subject Term:
Electronic data processing -- Auditing

Information auditing

Computer security

Computer networks -- Security measures
Added Author:
Schiller, Mike

Wheeler, Kevin

Available:*

Library
Item Barcode
Call Number
Material Type
Item Category 1
Status
Searching...
 30000010267185 QA76.9.A93 D38 2011 Open Access Book Book
Searching...

On Order

Summary

Summary

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.
Secure Your Systems Using the Latest IT Auditing Techniques

Fully updated to cover leading-edge tools and technologies, IT Auditing: Using Controls to Protect Information Assets, Second Edition , explains, step by step, how to implement a successful, enterprise-wide IT audit program. New chapters on auditing cloud computing, outsourced operations, virtualization, and storage are included. This comprehensive guide describes how to assemble an effective IT audit team and maximize the value of the IT audit function. In-depth details on performing specific audits are accompanied by real-world examples, ready-to-use checklists, and valuable templates. Standards, frameworks, regulations, and risk management techniques are also covered in this definitive resource.

Build and maintain an internal IT audit function with maximum effectiveness and value Audit entity-level controls, data centers, and disaster recovery Examine switches, routers, and firewalls Evaluate Windows, UNIX, and Linux operating systems Audit Web servers and applications Analyze databases and storage solutions Assess WLAN and mobile devices Audit virtualized environments Evaluate risks associated with cloud computing and outsourced operations Drill down into applications to find potential control weaknesses Use standards and frameworks, such as COBIT, ITIL, and ISO Understand regulations, including Sarbanes-Oxley, HIPAA, and PCI Implement proven risk management practices


Author Notes

Chris Davis, CISA, CISSP, CCNP, served as a senior IT auditor for Texas Instruments. He teaches auditing and certification curriculum for Southern Methodist University and is the coauthor of Hacking Exposed: Computer Forensics and Anti-Hacker Toolkit .
Mike Schiller, CISA, has 15 years of experience in the IT audit field, most recently as the worldwide IT Audit Manager at Texas Instruments. He teaches IT auditing courses at Southern Methodist University and is a frequent speaker at IT audit and IT security conferences such as CACS and InfoSec World.
Kevin Wheeler, CISSP, CISA, NSA IAM/IEM, is the Founder and CEO of InfoDefense, an information security consultancy. He has worked with Bank of America, EDS, McAfee, and the State of Texas.


Table of Contents

Part I Audit Overview
Chapter 1 Building an Effective Internal it Audit Function
Chapter 2 The Audit Process
Part II Auditing Techniques
Chapter 3 Auditing Entity-Level Controls
Chapter 4 Auditing Data Centers and Disaster Recovery
Chapter 5 Auditing Routers, Switches, and Firewalls
Chapter 6 Auditing Windows Operating Systems
Chapter 7 Auditing Unix and Linux Operating Systems
Chapter 8 Auditing Web Servers and Web Applications
Chapter 9 Auditing Databases
Chapter 10 Auditing Storage
Chapter 11 Auditing Virtualized Environments
Chapter 12 Auditing WLAN and Mobile Devices
Chapter 13 Auditing Applications
Chapter 14 Auditing Cloud Computing and Outsourced Operations
Chapter 15 Auditing Company Projects
Part III Frameworks, Standards, and Regulations
Chapter 16 Frameworks and Standards
Chapter 17 Regulations
Chapter 18 Risk Management
Index