CourseInfo | SimpliTrain

Description

This course gets into auditing information systems. Topics covered include the IS audit process, governance and management of IT, IS operations, maintenance, and support, IS operations and business resilience, and protection of information assets

Course Overview

This course gets into auditing information systems. Topics covered include the IS audit process, governance and management of IT, IS operations, maintenance, and support, IS operations and business resilience, and protection of information assets

No results found.

The IS Audit Process Lesson Id 1

The IS Audit Process

Governance and Management of IT Lesson Id 2

Governance and Management of IT

IS Operations, Maintenance, and Support Lesson Id 3

IS Operations, Maintenance, and Support

IS Operations and Business Resilience Lesson Id 4

IS Operations and Business Resilience

Protection of Information Assets Lesson Id 5

Protection of Information Assets

Lesson Id	Title	Description
1	The IS Audit Process	Topic A: The Auditing Process and Auditors<br />Definitions<br />Types of Auditors<br />The Auditing Process (1)<br />The Auditing Process (2)<br />The Auditing Process (3)<br />Audit Planning Process<br />Topic B: Risk Analysis<br />Risk Analysis Defined<br />Assessing Countermeasures<br />Steps of Assessment<br />Motivations for Risk Analysis<br />Topic C: Internal Controls<br />Internal Controls: Objectives & Procedures<br />Internal Control Types<br />Internal Controls (Preventative)<br />Internal Controls (Detective)<br />Internal Controls (Corrective)<br />Goals of Internal Controls<br />General Control Methods/Types<br />Audit Classifications<br />Phases of the Audit Process (Page 1)<br />Phases of the Audit Process (Page 2)<br />Inherent Risks During Audits<br />A Risk-Based Audit Approach<br />Evidence<br />Evidence Gathering Techniques<br />Computer Assisted Audit<br />Control Self-Assessment (CSA)<br />Chapter 1 Review
2	Governance and Management of IT	Topic A: The Role of Governance<br />IT Governance<br />Governance Defined<br />Relationship Structure<br />Role of Auditor<br />Practices & Procedures<br />Information Security Governance<br />Results of Security Governance<br />Goals of Security Governance<br />Topic B: Policies, Procedures, and Risk<br />Policies<br />Information Security Policy Document<br />Management Reviews<br />Procedures<br />Risk Management<br />Approaches<br />IT Risk Management<br />Levels<br />Topic C: IT Governance & Personnel Management<br />IS Management Practices<br />Personnel Management<br />Sourcing IS Functions<br />Insourcing and Outsourcing Strategy<br />Change Management<br />Organizational Quality Management<br />Quality Management<br />Performance Management<br />Chapter 2 Review
3	IS Operations, Maintenance, and Support	Topic A: Project Management<br />Project Management Structure<br />Example Organizational Chart<br />Practical Project Management<br />5 Steps<br />Topic B: Software Development and Acquisition<br />Business Application Development<br />Traditional SDLC Approach<br />Software Development Risks<br />Alternative Development Methods<br />Agile Development<br />Prototyping<br />R.A.D.<br />Rapid Application Deployment<br />4 Stages<br />Other Alternative Development Methods<br />Topic C: Infrastructure Development and Acquisition<br />Infrastructure Development and Acquisition<br />Analysis of Physical Infrastructures<br />4 Steps to Planning Infrastructure Implementation<br />Hardware / Software Acquisition<br />Maintaining Information Systems<br />Change Management Standards<br />Application Controls<br />Auditor Tasks<br />Input Controls<br />Data Validation Checks<br />Output Controls<br />Chapter 3 Review
4	IS Operations and Business Resilience	Topic A: Networking Models<br />Networking Models<br />Advantages of Reference Models<br />The OSI Model<br />Reliability<br />Topic B: IS Network Infrastructure<br />Network Types<br />Network Topology<br />VPN Defined<br />Wireless Specifications<br />Topic C: Business Continuity & Disaster Recovery<br />BCP/DR<br />Definitions<br />7 Steps to Recovery<br />BCP/DR Incident Classification<br />Business Impact Analysis<br />BIA<br />RPO and RTO<br />Recovery Strategies<br />Topic D: Recovery<br />Categories of Recovery Strategies<br />Business Recovery<br />Facilities, Materials, and Supplies<br />Data Recovery<br />Topic E: Disaster Recovery<br />Disaster Recovery Plan (DRP) Development<br />BCP & DR - Teams<br />BCP Components<br />R.A.I.D.<br />Insurance<br />Business Continuity Plan (BCP) Testing<br />Types of BCP/DR Testing Strategies<br />Auditing BCP/DR<br />Business Continuity Management (BCM) Institutes and Organizations<br />Business Continuity Management (BCM)<br />Chapter 4 Review
5	Protection of Information Assets	Topic A: Protecting Data<br />Key Elements, Roles, and Responsibilities<br />Classifying Information Assets<br />System Access Permission<br />Topic B: Threats and Vulnerabilities<br />4 Categories of Attacks<br />Exposures and Vulnerabilities<br />Topic C: Access Controls<br />Logical Access Paths<br />Identification and Authentication Mechanisms<br />Strong Password Policy<br />Authorization<br />Dealing with Data<br />LAN Security<br />Client-Server Security<br />Firewall<br />Intrusion Prevention Service (IPS)<br />Honeypot (HP)<br />Topic D: Encryption<br />Encryption Mechanisms<br />Symmetric vs. Asymmetric<br />Topic E: Auditing Practices<br />Auditing IS Management Framework<br />Auditing Logical Access<br />Penetration Testing<br />Computer Forensics<br />Chapter 5 Review<br />

Information Systems Auditor

Description

Course Overview