Fundamentals of Information Security Risk Management Auditing

Chris Wright is a qualified accountant and Certified Information Systems Auditor (CISA) with over 30 years’ experience providing financial and IT advisory and risk management services. He worked for 16 years at KPMG, where he managed a number of IT due diligence reviews and was head of information risk training in the UK. He has also worked in a wide range of industry sectors including oil and gas, small and medium enterprises, public sector, aviation and travel.

• Part I: What is risk and why is it important?. 1: Risks and controls2: Enterprise risk management (ERM) frameworks3: Risk management assurance and audit4: Information Risks and FrameworksPart II: Introduction to General IT and Management Risks5: Overview of General IT and Management Risks6: Security and Data Privacy7: System Development and Change Control8: Service Management and Disaster PlanningPart III: Introduction to Application Controls9: Overview of Application Controls (Integrity)Part IV: Life as an Information Risk Management Specialist10: Planning, Running and Reviewing Information Risk Management Assignments11: Personal Development and Qualifications