Understanding and Conducting Information Systems Auditing + Website

Preface

THIS BOOK FOCUSES ON an information systems audit as a management control and not a technology-driven subject. Complete with resources to understand the subject, definitions of technical terms, ready checklists to conduct an information systems audit, and multiple-choice questions to review the level of understanding, the book is designed to be an indispensable resource for the information systems practitioner and aspirant alike. Readers will find enough resources for their audit needs, examination needs, and even continuing professional education requirements.

Increased dependence on information systems assets for performing critical functions of an organization has strengthened the need for using information systems audits as a control to ensure confidentiality, integrity, and availability of information systems resources. Major problems that an information systems auditor faces include apparent technology bias of the subject, lack of a standardized audit approach, and lack of availability of standardized checklists. In this book, we have attempted to address these problems by approaching the subject from the viewpoint of management control, providing readers with requisite knowledge resources, and making available an audit tool in the form of checklists.

Our approach to an information systems audit is essentially nontechnical in nature. We firmly believe that an information systems audit is a managerial control tool and use of technology is subordinate to it. We hold ...