IT Auditing: Using Controls to Protect Information Assets

by C. Davis, Mike Schiller, Kevin Wheeler

IT Auditing provides guidance on creating an effective and value-added internal IT audit function. The book presents information in easily digestible sections, allowing the reader to quickly grasp critical and practical techniques. The book contains practical tools and checklists, as well as discussions of key concepts and methods for their effective use. It provides a unique combination of practical 'how to' information on IT auditing for the new auditor and cutting edge audit techniques for the experienced auditor. This edition is completely revised to address the new issues auditors are facing, and covers new technology including cloud computing and virtualization. Key Selling Features Written by industry experts. The authors combine real-world experience in auditing government, banking, and high tech companies. Authors have experience in leading and managing international audits Contains the latest auditing tools including tips and advice on how to configure them to get the best results New chapters on how to audit recent technology developments, such as cloud computing, virtualization, and storage, as well as updating the chapters from the first edition to reflect recent technological developments Provides a flexible, tested framework for the reader to use when performing IT Audits Foreword by ISACA (Information Systems Audit and Control Association) About The Author: Chris Davis, CISA, CISSP, CCNP, served as a senior IT auditor for Texas Instruments. He teaches auditing and certification curriculum for Southern Methodist University and is the coauthor of Hacking Exposed: Computer Forensics and Anti-Hacker Toolkit. Mike Schiller, CISA, has 15 years of experience in the IT audit field, most recently as the worldwide IT Audit Manager at Texas Instruments. He teaches IT auditing courses at Southern Methodist Unive

285 pages, Paperback

First published December 1, 2006

Reviews

[Justin Miller · Rating 3 out of 5]

Informative book on IT Auditing processes. I think it could have gone into better details about it, however. If I need to further my studies on this for my career, I definitely would pick a different book than this one.