Del 6 - Fundamentals Series

Fundamentals of Information Security Risk Management Auditing

An introduction for managers and auditors

Häftad, Engelska, 2016

Av Christopher Wright

319 kr

Beställningsvara. Skickas inom 5-8 vardagar

Fri frakt för medlemmar vid köp för minst 249 kr.

An introductory guide to information risk management auditing, giving an interesting and useful insight into the risks and controls/mitigations that you may encounter when performing or managing an audit of information risk. Case studies and chapter summaries impart expert guidance to provide the best grounding in information risk available for risk managers and non-specialists alike.

Produktinformation

Utgivningsdatum2016-04-12
Mått129 x 198 x 9 mm
Vikt174 g
FormatHäftad
SpråkEngelska
SerieFundamentals Series
Antal sidor172
FörlagIT Governance Publishing
ISBN9781849288156

Tillhör följande kategorier

Informationsteknik: allmänt inom Data och it
Finansiering inom Ekonomi och ledarskap
Redovisning inom Ekonomi och ledarskap
Referensverk och tvärvetenskap inom Samhalle och politik
IT-säkerhet inom Data och it

Chris Wright is a qualified accountant and Certified Information Systems Auditor (CISA) with over 30 years’ experience providing financial and IT advisory and risk management services. He worked for 16 years at KPMG, where he managed a number of IT due diligence reviews and was head of information risk training in the UK. He has also worked in a wide range of industry sectors including oil and gas, small and medium enterprises, public sector, aviation and travel.

Part I: What is risk and why is it important?. 1: Risks and controls2: Enterprise risk management (ERM) frameworks3: Risk management assurance and audit4: Information Risks and FrameworksPart II: Introduction to General IT and Management Risks5: Overview of General IT and Management Risks6: Security and Data Privacy7: System Development and Change Control8: Service Management and Disaster PlanningPart III: Introduction to Application Controls9: Overview of Application Controls (Integrity)Part IV: Life as an Information Risk Management Specialist10: Planning, Running and Reviewing Information Risk Management Assignments11: Personal Development and Qualifications