The tools, guidelines, and procedures that IS auditors need

Auditing Information Systems, Second Edition, explains clearly how to audit the controls and security over all types of information systems environments. The concepts and techniques in the book enable auditors, information security professionals, managers, and audit committee members of every knowledge and skill level to truly understand whether or not their computing systems are safe. The book provides a detailed examination of contemporary auditing issues such as:

• Information systems audit approach (physical, logical, environmental security)
• Security certifications such as SAS 70, TruSecure, SysTrust, and WebTrust
• Computer forensics
• E-Commerce and Internet security (including encryption and cryptography)
• Information privacy laws and regulations
• Information systems project management controls
• New technologies and future risks

Auditing Information Systems, Second Edition gives auditing professionals the tools they need to get their job done right. It is a must-have reference for any auditor’s library.