Muutke küpsiste eelistusi

Auditing Information Systems and Controls: The Only Thing Worse Than No Control Is the Illusion of Control [Pehme köide]

  • Formaat: Paperback / softback, 238 pages, kõrgus x laius x paksus: 229x152x14 mm, kaal: 354 g
  • Ilmumisaeg: 22-Jun-2007
  • Kirjastus: Xlibris Us
  • ISBN-10: 1425763227
  • ISBN-13: 9781425763220
Teised raamatud teemal:
Auditing Information Systems and Controls: The Only Thing Worse Than No Control Is the Illusion of ControlSuurem pilt
  • Formaat: Paperback / softback, 238 pages, kõrgus x laius x paksus: 229x152x14 mm, kaal: 354 g
  • Ilmumisaeg: 22-Jun-2007
  • Kirjastus: Xlibris Us
  • ISBN-10: 1425763227
  • ISBN-13: 9781425763220
Teised raamatud teemal:
Püsilink: https://www.kriso.ee/db/9781425763220.html
Märksõnad:
Preface 13(2)
What This Book Covers 15(2)
This Book's Target Audicence 17(1)
How to Use This Book 18(1)
Part 1: Sarbance Oxley and Regulatory Agencies
Sarbances Oxley Highilights
19(10)
Introduction
20(2)
Baxkgroudn
22(2)
Section 203
24(1)
Section 404
24(2)
Other SOX Standards
26(1)
Summary
27(2)
Regulatory Agencaies and Control Frameworks
29(12)
Introduction
30(1)
SEC
31(1)
ISACA
31(1)
Foreign Corrupt practices ACt
32(1)
AICPA (Cohen Commission)
32(1)
COSO
32(2)
COBT
34(1)
AICPA (Committee)
35(1)
COSO Fraud Report
35(1)
POB Report on Audit Effectivess
36(1)
SOX Hifhlights
36(1)
Audit Standard#2
37(1)
Basel II Accord
37(2)
summary
39(2)
Part 2: Controls and IT Infrastructure
Controls Overviesw
41(12)
Introduction
42(1)
Importance of Controls
43(1)
Control Benefits
44(2)
Control Amioms
46(1)
Principles of Control
47(4)
Summary
51(2)
Control Definitions
53(16)
Introduction
54(1)
Control Types
55(3)
Separation of duties
58(9)
Summary
67(2)
Establishment of a Sound It Control Insfrastructure
69(18)
Introduction
70(1)
Board of Directors
71(1)
The Audit Committee
72(3)
The CGO
75(3)
Audit Readiness program
78(1)
Audit Teams
78(7)
Organization Chart
85(1)
summary
85(2)
Proactive IT Control Acativities
87(1)
Introduction
88(1)
Self-Assessments
89(4)
Peer Reviews
93(1)
Internal Audits
94(1)
Process Documentation
95(7)
Procedures
102(5)
Independent External Assessements
107(1)
Summary
108(12)
Assesemnt of IT Copntrols and Evaluation of Effectiveness
111(108)
Introduction
112(1)
validate and Record Issues
112(1)
Risk assessments
113(2)
Establidh Correvtive Action Plans
115(1)
Remediation Testing
115(1)
Review with Audit Committee
115(1)
Assessemnt of Control postru
116(1)
Risk Assessemnts on SOX Recommendations
116(1)
Executive Appraisals
116(1)
summary
117(2)
Part 2: The audit Process
Internal Aduit process
119(14)
Intrduction
120(2)
Kickoff meetings
122(1)
Requests
123(1)
Interviews
124(2)
Findings
126(1)
Status Meetings
127(1)
Recommendations
128(1)
Final Report
128(1)
Final Report
128(1)
Final Audit Reprot Distirbution
129(1)
Final Audit Report Response
129(1)
Summary
130(3)
Sarbanes Oxley Audit Process
133(10)
Introduction
134(1)
Separation on Duties
134(1)
SOX 404 Requirements
134(2)
Similarities to Traditional audit prcess
136(1)
Differences with Traditional Audit Processes
136(4)
Summary
140(3)
Part 4: Audit Activities
DevelopmentMaintenance Methodolgy and Prohect Management
143(20)
Introduction
144(2)
SEI
146(3)
work Management Maethodology
149(7)
Metrics
156(1)
Quality Management'
157(2)
Progect risk Management
159(1)
Summary
160(3)
Production Cahgne Mangement
163(1816)
Introduction
164(1)
work Authorizations
165(3)
Testing
168(1)
Issues Mangement
169(1)
Library Control
170(1)
Code Migration
171(4)
Summary
175(5)
Application Controls
179(1)
Introduction
180(2)
Application Ownership
182(1)
Application Documentation
183(1)
Input contols/Outpurt Controls/Interface Controls
183(2)
Balancing/Reconciliation
185(1)
Processing Contols
186(1)
Application Access Contols
187(3)
Data Calssification Controls
190(1)
Application Motitoring
191(1)
Service Level Agreements
192(1)
summary
193(2)
Operationa Controls
195(1)
Introduction
196(2)
Security Responsibilities
198(1)
Logical Controls
199(9)
Physical Controls
208(7)
Business Continuty
215(1)
Summary
216(1)
Part 5: New Challenges
Spredasheets
217(8)
Introduction
218(1)
Background
219(1)
Potential Risks
220(1)
Proactive Measures
221(2)
Summamry
223(2)
Outsourcing IT Contols (SaS70)
225(11)
Introduction
226(1)
SAS70 Background
227(1)
Types of SAS70 Reports
228(2)
SAS70 Process
230(2)
The Decision for a SAS70 report
232(2)
Timing of the SAS70 Audit
234(1)
Difference between a SAS70 Audit and a Traditiona audit
234(1)
Effect of SAS70 on Outsourcing
235(1)
Summary 236