Dewey Decimal658.4038011
Table Of ContentIntroduction. Self-Assessment. 1. The Information Systems (IS) Audit Process. Conducting IS Audits in Accordance with Generally Accepted IS Audit Standards and Guidelines. ISACA IS Auditing Standards and Guidelines and Code of Professional Ethics. Auditing Standards Explained. The ISACA Code of Professional Ethics. Ensuring That the Organization''s Information Technology and Business Systems are Adequately Controlled, Monitored, and Assessed. ISACA''s CobiT Framework. Control Self-Assessment. Risk-Based IS Audit Strategy and Objectives. Aligning Controls with the Organization''s Business Objectives. Steering Committee. Strategic Planning. Organizational Structure. IT Department Head. Security Department. Quality Assurance. Applications. Data Management. Technical Support. Operations. Segregation of Duties. IS Auditing Practices and Techniques. Audit Planning and Management Techniques. Information Systems Audits. Attestation. Findings and Recommendations. SAS 70. SAS 94. Attribute Sampling. Variable Sampling. Substantive Tests. Compliance Tests. Audit Conclusions. Obtaining Evidence. Organization''s Use of System Platforms, IT Infrastructure, and Applications. Techniques to Gather Information and Preserve Evidence. Control Objectives and Controls Related to IS (Such as Preventative and Detective). Reviewing the Audit. Communicating Audit Results. Facilitating Risk Management and Control Practices. IS, Business, and Audit Risk (Such as Threats and Impacts). Risk-Analysis Methods, Principles, and Criteria. Communication Techniques. Personnel-Management Techniques. Practice Questions. 2. Management, Planning, and Organization of IS. Strategy, Policies, Standards, and Procedures. Strategic Planning. IS Steering Committee. The Components of IS Strategies, Policies, Standards, and Procedures. Policy Development. IT Policy. Procedures. Evaluating IS Management Practices to Ensure Compliance with IS Policies, Standards, and Procedures. Evaluating the Process for Strategy Development, Deployment, and Maintenance. Principles of IS Organizational Structure and Design. Evaluating IS Organization and Structure. Evaluating Use of Third-Party Services. Examining IS Management and Practices. IS Project-Management Strategies and Policies. IT Governance, Risk Management, and Control Frameworks. IS Problem- and Change-Management Strategies and Policies. IS Quality-Management Strategies and Policies. IS Information Security Management Strategies and Policies. IS Business Continuity Management Strategies and Policies. Contracting Strategies, Processes, and Contract-Management Practices. Employee Contracts. Confidentiality Agreement. Trade Secret Agreements. Discovery Agreements. Noncompete Agreements. Roles and Responsibilities of IS Functions (Including Segregation of Duties). Practices Related to the Management of Technical and Operational Infrastructure. &n
SynopsisWant an affordable yet innovative approach to studying for the Certified Information Systems Auditor (CISA) 2005 exam? CISA 2005 Exam Cram 2 is your solution. You will have the essential material for passing the CISA 2005 exam right at your fingertips. All exam objectives are covered and you'll find practice exams, exam alerts, notes, tips and cautions to help guide you through your exam preparation. A CD also provides you with a video introduction to the exam and complete explanations of answers to the practice questions from Certified Tech Trainers (CTT). As a special bonus, you will receive $75 in discounts on CTT products and services. For your smartest, most efficient way to get certified, choose CISA 2005 Exam Cram 2 .
LC Classification NumberHD30.213