Author: Michael G. Grottola
Publisher: McGraw-Hill Companies
ISBN:
Category : Computers
Languages : en
Pages : 200
Book Description
This book presents tools available in UNIX to audit the file system, security, back-up procedures, system use & performance, remote access facilities, & disaster planning for any UNIX installation. The reader will design their own UNIX audit plan that measures & produces audit results for all of the above. They will then publish a final audit report.
IT Auditing: Using Controls to Protect Information Assets
Author: Chris Davis
Publisher: McGraw Hill Professional
ISBN: 0071631763
Category : Computers
Languages : en
Pages : 417
Book Description
Protect Your Systems with Proven IT Auditing Strategies "A must-have for auditors and IT professionals." -Doug Dexter, CISSP-ISSMP, CISA, Audit Team Lead, Cisco Systems, Inc. Plan for and manage an effective IT audit program using the in-depth information contained in this comprehensive resource. Written by experienced IT audit and security professionals, IT Auditing: Using Controls to Protect Information Assets covers the latest auditing tools alongside real-world examples, ready-to-use checklists, and valuable templates. Inside, you'll learn how to analyze Windows, UNIX, and Linux systems; secure databases; examine wireless networks and devices; and audit applications. Plus, you'll get up-to-date information on legal standards and practices, privacy and ethical issues, and the CobiT standard. Build and maintain an IT audit function with maximum effectiveness and value Implement best practice IT audit processes and controls Analyze UNIX-, Linux-, and Windows-based operating systems Audit network routers, switches, firewalls, WLANs, and mobile devices Evaluate entity-level controls, data centers, and disaster recovery plans Examine Web servers, platforms, and applications for vulnerabilities Review databases for critical controls Use the COSO, CobiT, ITIL, ISO, and NSA INFOSEC methodologies Implement sound risk analysis and risk management practices Drill down into applications to find potential control weaknesses
Publisher: McGraw Hill Professional
ISBN: 0071631763
Category : Computers
Languages : en
Pages : 417
Book Description
Protect Your Systems with Proven IT Auditing Strategies "A must-have for auditors and IT professionals." -Doug Dexter, CISSP-ISSMP, CISA, Audit Team Lead, Cisco Systems, Inc. Plan for and manage an effective IT audit program using the in-depth information contained in this comprehensive resource. Written by experienced IT audit and security professionals, IT Auditing: Using Controls to Protect Information Assets covers the latest auditing tools alongside real-world examples, ready-to-use checklists, and valuable templates. Inside, you'll learn how to analyze Windows, UNIX, and Linux systems; secure databases; examine wireless networks and devices; and audit applications. Plus, you'll get up-to-date information on legal standards and practices, privacy and ethical issues, and the CobiT standard. Build and maintain an IT audit function with maximum effectiveness and value Implement best practice IT audit processes and controls Analyze UNIX-, Linux-, and Windows-based operating systems Audit network routers, switches, firewalls, WLANs, and mobile devices Evaluate entity-level controls, data centers, and disaster recovery plans Examine Web servers, platforms, and applications for vulnerabilities Review databases for critical controls Use the COSO, CobiT, ITIL, ISO, and NSA INFOSEC methodologies Implement sound risk analysis and risk management practices Drill down into applications to find potential control weaknesses
Auditor's Guide to IT Auditing
Author: Richard E. Cascarino
Publisher: John Wiley & Sons
ISBN: 1118239075
Category : Business & Economics
Languages : en
Pages : 469
Book Description
Step-by-step guide to successful implementation and control of IT systems—including the Cloud Many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Now in a Second Edition, Auditor's Guide to IT Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. Follows the approach used by the Information System Audit and Control Association's model curriculum, making this book a practical approach to IS auditing Serves as an excellent study guide for those preparing for the CISA and CISM exams Includes discussion of risk evaluation methodologies, new regulations, SOX, privacy, banking, IT governance, CobiT, outsourcing, network management, and the Cloud Includes a link to an education version of IDEA--Data Analysis Software As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. Auditor's Guide to IT Auditing, Second Edition empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.
Publisher: John Wiley & Sons
ISBN: 1118239075
Category : Business & Economics
Languages : en
Pages : 469
Book Description
Step-by-step guide to successful implementation and control of IT systems—including the Cloud Many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Now in a Second Edition, Auditor's Guide to IT Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. Follows the approach used by the Information System Audit and Control Association's model curriculum, making this book a practical approach to IS auditing Serves as an excellent study guide for those preparing for the CISA and CISM exams Includes discussion of risk evaluation methodologies, new regulations, SOX, privacy, banking, IT governance, CobiT, outsourcing, network management, and the Cloud Includes a link to an education version of IDEA--Data Analysis Software As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. Auditor's Guide to IT Auditing, Second Edition empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.
IT Audit, Control, and Security
Author: Robert R. Moeller
Publisher: John Wiley & Sons
ISBN: 0470877685
Category : Business & Economics
Languages : en
Pages : 696
Book Description
When it comes to computer security, the role of auditors today has never been more crucial. Auditors must ensure that all computers, in particular those dealing with e-business, are secure. The only source for information on the combined areas of computer audit, control, and security, the IT Audit, Control, and Security describes the types of internal controls, security, and integrity procedures that management must build into its automated systems. This very timely book provides auditors with the guidance they need to ensure that their systems are secure from both internal and external threats.
Publisher: John Wiley & Sons
ISBN: 0470877685
Category : Business & Economics
Languages : en
Pages : 696
Book Description
When it comes to computer security, the role of auditors today has never been more crucial. Auditors must ensure that all computers, in particular those dealing with e-business, are secure. The only source for information on the combined areas of computer audit, control, and security, the IT Audit, Control, and Security describes the types of internal controls, security, and integrity procedures that management must build into its automated systems. This very timely book provides auditors with the guidance they need to ensure that their systems are secure from both internal and external threats.
Information Technology Auditing
Author: Jagdish Pathak
Publisher: Springer Science & Business Media
ISBN: 3540274863
Category : Business & Economics
Languages : en
Pages : 246
Book Description
An evolving agenda of Information Technology Auditing is subject of this book. The author presents various current and future issues in the domain of IT Auditing in both scholarly as well as highly practice-driven manner so as to make those issues clear in the mind of an IT auditor. The aim of the book is not to delve deep on the technologies but the impact of these technologies on practices and procedures of IT auditors. Among the topics are complex integrated information systems, enterprise resource planning, databases, complexities of internal controls, and enterprise application integration - all seen from an auditor's perspective. The book will serve a big purpose of support reference for an auditor dealing with the high-tech environment for the first time, but also for experienced auditors.
Publisher: Springer Science & Business Media
ISBN: 3540274863
Category : Business & Economics
Languages : en
Pages : 246
Book Description
An evolving agenda of Information Technology Auditing is subject of this book. The author presents various current and future issues in the domain of IT Auditing in both scholarly as well as highly practice-driven manner so as to make those issues clear in the mind of an IT auditor. The aim of the book is not to delve deep on the technologies but the impact of these technologies on practices and procedures of IT auditors. Among the topics are complex integrated information systems, enterprise resource planning, databases, complexities of internal controls, and enterprise application integration - all seen from an auditor's perspective. The book will serve a big purpose of support reference for an auditor dealing with the high-tech environment for the first time, but also for experienced auditors.
Auditor's Guide to Information Systems Auditing
Author: Richard E. Cascarino
Publisher: John Wiley & Sons
ISBN: 0470127031
Category : Business & Economics
Languages : en
Pages : 510
Book Description
Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." —E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.
Publisher: John Wiley & Sons
ISBN: 0470127031
Category : Business & Economics
Languages : en
Pages : 510
Book Description
Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." —E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.
Secret Oracle - Unleashing the Full Potential of the Oracle DBMS by Leveraging Undocumented Features
Author: Norbert Debes
Publisher: Lulu.com
ISBN: 1435705513
Category : Computers
Languages : en
Pages : 406
Book Description
Secret ORACLE is the definitive guide to undocumented and partially documented features of the ORACLE database server. This book will improve your efficiency as an ORACLE database administrator and enable you to master more difficult administrative, tuning, and troubleshooting tasks than you ever thought possible. Topics covered include: The MERITS performance optimization method, which extends the state-of-the-art wait event tuning paradigm. Controlling processes of an ORACLE instance with the fragmentarily documented ORADEBUG command to trace SQL statements as well as wait events and dump process state, call stack, and hang analysis information. Tracing the cost based optimizer to understand its cost calculations and decisions. Understanding hidden parameters that govern Automatic PGA Memory Management. Leveraging undocumented features of the Oracle10g/11g scheduler and other partially or fully undocumented PL/SQL packages, such as DBMS_SYSTEM, DBMS_SUPPORT, and DBMS_UTILITY.
Publisher: Lulu.com
ISBN: 1435705513
Category : Computers
Languages : en
Pages : 406
Book Description
Secret ORACLE is the definitive guide to undocumented and partially documented features of the ORACLE database server. This book will improve your efficiency as an ORACLE database administrator and enable you to master more difficult administrative, tuning, and troubleshooting tasks than you ever thought possible. Topics covered include: The MERITS performance optimization method, which extends the state-of-the-art wait event tuning paradigm. Controlling processes of an ORACLE instance with the fragmentarily documented ORADEBUG command to trace SQL statements as well as wait events and dump process state, call stack, and hang analysis information. Tracing the cost based optimizer to understand its cost calculations and decisions. Understanding hidden parameters that govern Automatic PGA Memory Management. Leveraging undocumented features of the Oracle10g/11g scheduler and other partially or fully undocumented PL/SQL packages, such as DBMS_SYSTEM, DBMS_SUPPORT, and DBMS_UTILITY.
Databases and Information Systems V
Author: Hele-Mai Haav
Publisher: IOS Press
ISBN: 1586039393
Category : Computers
Languages : en
Pages : 324
Book Description
The Eighth International Baltic Conference on Databases and Information Systems took place on June 2–5 2008 in Tallinn, Estonia. This conference is continuing a series of successful bi-annual Baltic conferences on databases and information systems (IS). The aim is to provide a wide international forum for academics and practitioners in the field of databases and modern information systems for exchanging their achievements in this area. The original research results presented in Databases and Information Systems V mostly belong to novel fields of IS and database research such as database technology and the semantic web, ontology-based IS, IS and AI technologies and IS integration. The contribution of Dr. Jari PalomÄki showed how different ontological commitments affect the way we are modeling the world when creating an information system. As semantic technologies have been gaining more attention recently, a special session on semantic interoperability of IS was organized. The invited talks from each Baltic State gave a good insight how semantic interoperability initiatives are developing in each of the Baltic States and how they relate to the European semantic interoperability framework.
Publisher: IOS Press
ISBN: 1586039393
Category : Computers
Languages : en
Pages : 324
Book Description
The Eighth International Baltic Conference on Databases and Information Systems took place on June 2–5 2008 in Tallinn, Estonia. This conference is continuing a series of successful bi-annual Baltic conferences on databases and information systems (IS). The aim is to provide a wide international forum for academics and practitioners in the field of databases and modern information systems for exchanging their achievements in this area. The original research results presented in Databases and Information Systems V mostly belong to novel fields of IS and database research such as database technology and the semantic web, ontology-based IS, IS and AI technologies and IS integration. The contribution of Dr. Jari PalomÄki showed how different ontological commitments affect the way we are modeling the world when creating an information system. As semantic technologies have been gaining more attention recently, a special session on semantic interoperability of IS was organized. The invited talks from each Baltic State gave a good insight how semantic interoperability initiatives are developing in each of the Baltic States and how they relate to the European semantic interoperability framework.
Secrets of the Oracle Database
Author: Norbert Debes
Publisher: Apress
ISBN: 143021953X
Category : Computers
Languages : en
Pages : 510
Book Description
Secrets of the Oracle Database is the definitive guide to undocumented and partially-documented features of the Oracle Database server. Covering useful but little-known features from Oracle Database 9 through Oracle Database 11, this book will improve your efficiency as an Oracle database administrator or developer. Norbert Debes shines the light of day on features that help you master more difficult administrative, tuning, and troubleshooting tasks than you ever thought possible. Finally, in one place, you have at your fingertips knowledge that previously had to be acquired through years of experience and word of mouth through knowing the right people. What Norbert writes is accurate, well-tested, well-illustrated by clear examples, and sure to improve your ability to make an impact on your day-to-day work with Oracle.
Publisher: Apress
ISBN: 143021953X
Category : Computers
Languages : en
Pages : 510
Book Description
Secrets of the Oracle Database is the definitive guide to undocumented and partially-documented features of the Oracle Database server. Covering useful but little-known features from Oracle Database 9 through Oracle Database 11, this book will improve your efficiency as an Oracle database administrator or developer. Norbert Debes shines the light of day on features that help you master more difficult administrative, tuning, and troubleshooting tasks than you ever thought possible. Finally, in one place, you have at your fingertips knowledge that previously had to be acquired through years of experience and word of mouth through knowing the right people. What Norbert writes is accurate, well-tested, well-illustrated by clear examples, and sure to improve your ability to make an impact on your day-to-day work with Oracle.
Federal Information System Controls Audit Manual (FISCAM)
Author: Robert F. Dacey
Publisher: DIANE Publishing
ISBN: 1437914063
Category : Business & Economics
Languages : en
Pages : 601
Book Description
FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.
Publisher: DIANE Publishing
ISBN: 1437914063
Category : Business & Economics
Languages : en
Pages : 601
Book Description
FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.
Securing an IT Organization through Governance, Risk Management, and Audit
Author: Ken E. Sigler
Publisher: CRC Press
ISBN: 1498737323
Category : Business & Economics
Languages : en
Pages : 364
Book Description
Past events have shed light on the vulnerability of mission-critical computer systems at highly sensitive levels. It has been demonstrated that common hackers can use tools and techniques downloaded from the Internet to attack government and commercial information systems. Although threats may come from mischief makers and pranksters, they are more
Publisher: CRC Press
ISBN: 1498737323
Category : Business & Economics
Languages : en
Pages : 364
Book Description
Past events have shed light on the vulnerability of mission-critical computer systems at highly sensitive levels. It has been demonstrated that common hackers can use tools and techniques downloaded from the Internet to attack government and commercial information systems. Although threats may come from mischief makers and pranksters, they are more