Table of Contents

FOUNDATION FOR IT AUDIT AND CONTROL
Information Technology Environment: Why are Controls and
Audit Important?
Audit and Review: Its Role in Information Technology
The Audit Process in an Information Technology Environment
Auditing Using Computer Assisted Audit Tools and Techniques

AUDITING IT PLANNING AND ORGANIZATION
Strategy and Standards
Planning and Controlling
Project Management
Quality Management

AUDITING IT ACQUISITION AND IMPLEMENTATION
Software Acquisition
Project Implementation
Application Maintenance
Change Management

AUDITING IT OPERATIONS: FROM STANDALONE TO
GLOBAL
IT Operations Environments: Complexities and Control Issues
Operational Control Issues
Assessing Risk in IT Operations
Audit Methods and Techniques for Operations
Using Tools and Techniques In IT Operation Reviews

EMERGING ISSUES IN IT AUDIT
The Legal Environment and its Impact on Information
Technology: From IT Crime Law to IT Contract Law to
Netlaw
Security and Privacy of Information Technology: Individual to the
Intranet/Internet
IT Auditing: Career Planning and Development, Evaluating Audit
Quality and Best Practices
IT Auditing in the New Millennium

APPENDIXES
IT Audit Cases
Bibliography of Selected Publications for Information
Technology Auditors
Professional Standards and Guidance that apply to Information
Technology
Glossary
Sample Audit Programs

Reviews

"The book is very useful for beginners as well as practitioners[It] is well written and presented. Its practical implementation in the country of origin of the authors (USA) should provide resiliency to IT security in the emerging cyberworld." - Information Systems Control Journal, Vol. 4, 2005