IT Auditing and Application Controls for Small and Mid-Sized Enterprises

IT Auditing and Application Controls for Small and Mid-Sized Enterprises
Author: Jason Wood
Publisher: John Wiley & Sons
Total Pages: 448
Release: 2013-12-09
Genre: Business & Economics
ISBN: 1118072618

Essential guidance for the financial auditor in need of a working knowledge of IT If you're a financial auditor needing working knowledge of IT and application controls, Automated Auditing Financial Applications for Small and Mid-Sized Businesses provides you with the guidance you need. Conceptual overviews of key IT auditing issues are included, as well as concrete hands-on tips and techniques. Inside, you'll find background and guidance with appropriate reference to material published by ISACA, AICPA, organized to show the increasing complexity of systems, starting with general principles and progressing through greater levels of functionality. Provides straightforward IT guidance to financial auditors seeking to develop quality and efficacy of software controls Offers small- and middle-market business auditors relevant IT coverage Covers relevant applications, including MS Excel, Quickbooks, and report writers Written for financial auditors practicing in the small to midsized business space The largest market segment in the United States in quantity and scope is the small and middle market business, which continues to be the source of economic growth and expansion. Uniquely focused on the IT needs of auditors serving the small to medium sized business, Automated Auditing Financial Applications for Small and Mid-Sized Businesses delivers the kind of IT coverage you need for your organization.

IT Auditing and Application Controls for Small and Mid-Sized Enterprises

IT Auditing and Application Controls for Small and Mid-Sized Enterprises
Author: Jason Wood
Publisher: John Wiley & Sons
Total Pages: 448
Release: 2013-11-22
Genre: Business & Economics
ISBN: 1118233190

Essential guidance for the financial auditor in need of a working knowledge of IT If you're a financial auditor needing working knowledge of IT and application controls, Automated Auditing Financial Applications for Small and Mid-Sized Businesses provides you with the guidance you need. Conceptual overviews of key IT auditing issues are included, as well as concrete hands-on tips and techniques. Inside, you'll find background and guidance with appropriate reference to material published by ISACA, AICPA, organized to show the increasing complexity of systems, starting with general principles and progressing through greater levels of functionality. Provides straightforward IT guidance to financial auditors seeking to develop quality and efficacy of software controls Offers small- and middle-market business auditors relevant IT coverage Covers relevant applications, including MS Excel, Quickbooks, and report writers Written for financial auditors practicing in the small to midsized business space The largest market segment in the United States in quantity and scope is the small and middle market business, which continues to be the source of economic growth and expansion. Uniquely focused on the IT needs of auditors serving the small to medium sized business, Automated Auditing Financial Applications for Small and Mid-Sized Businesses delivers the kind of IT coverage you need for your organization.

Internal Control Strategies

Internal Control Strategies
Author: Julie Harrer
Publisher: John Wiley & Sons
Total Pages: 308
Release: 2008-12-03
Genre: Business & Economics
ISBN: 0470437618

Praise for Internal Control Strategies A Mid to Small Business Guide "Internal Control Strategies is an excellent field guide for the implementation and maintenance of efficient and effective internal control systems. The book provides a practical approach to interpreting guidance from oversight agencies and integrating it with industry practice in a real-world environment. This handbook is an essential tool for managers and professionals going through the day-to-day struggle of managing auditor expectations and permitting business to proceed in the most efficient manner." -Michael Rodriguez, former senior manager of finance, Qualcomm Incorporated "Internal Control Strategies is the clearest path forward for middle-market SEC registrants and their independent registered public accounting firms as they streamline the SOX 404 compliance process in 2008 and beyond." -Stephen G. Austin, MBA, CPA, Managing Firm Partner,Swenson Advisors, LLP, Regional PCAOB Accounting Firm "Clearly written and practical, Internal Control Strategies is a must-read for every chief audit, finance, or compliance executive." -Jeff Miller, Partner-in-Charge, Business Risk Services,Squar, Milner, Peterson, Miranda & Williamson, LLP "As a CFO of small to mid-sized publicly traded and privately held companies, one is usually faced with the challenge of developing and implementing the right levels of internal controls and compliance within the restrictions of limited financial and human resources. Internal Control Strategies presents the relevant topics in a clear and concise manner, allowing the reader to understand the internal control framework and specific underlying requirements quickly. The author's vast experience with SOX compliance ensures a targeted and pragmatic approach for the successful implementation of internal controls. Her recommendations are 'to the point' and eliminate some of the guesswork we all have experienced while working towards SOX compliance." -Robert S. Stefanovich, Chief Financial Officer, Novalar Pharmaceuticals, Inc. The SEC requires all publicly traded companies to attest to theeffectiveness of their internal controls. Is your business ready? Internal Control Strategies: A Mid to Small Business Guide clearly explains the latest PCAOB, SEC, and COSO guidance, providing you with an effective tool and reference guide for successful implementation of sections 302 and 404 of the Sarbanes-Oxley Act. Extremely knowledgeable and insightful, author Julie Harrer brings practical clarity to this complex topic, leading you step by step in addressing the challenges associated in bringing your business in compliance with SOX.

Auditing Information Systems

Auditing Information Systems
Author: Abraham Nyirongo
Publisher: Trafford Publishing
Total Pages: 150
Release: 2015-03-11
Genre: Computers
ISBN: 1490754970

The role of the information systems auditor is not just about compliance and performance testing but goes beyond by adding value to the enterprise through being an IS advisor to management. This book, whilst covering all the necessary skills in IS auditing, also focuses on the role of the IS auditor in enhancing the performance of the enterprise. The IS auditor is a key member of the enterprise and ensures that technology is used appropriately, protects data, and provides a secure environment. The book outlines the IS audit process in detail, enabling the reader to acquire necessary skills on how to conduct an IS audit. Included in the book are other formative skills, such as IT general controls, applications controls, IT governance, information security, IT risk, and disaster recovery. The book also covers all the necessary technologies an IS auditor requires to learn and understand in order to be an effective auditor. A good flair for technology is a must for one to be a good IS auditor. The book focuses on both learning the technology and developing appropriate evidence-gathering skills.

IT Audit, Control, and Security

IT Audit, Control, and Security
Author: Robert R. Moeller
Publisher: John Wiley & Sons
Total Pages: 696
Release: 2010-11-02
Genre: Business & Economics
ISBN: 0471406767

When it comes to computer security, the role of auditors today has never been more crucial. Auditors must ensure that all computers, in particular those dealing with e-business, are secure. The only source for information on the combined areas of computer audit, control, and security, the IT Audit, Control, and Security describes the types of internal controls, security, and integrity procedures that management must build into its automated systems. This very timely book provides auditors with the guidance they need to ensure that their systems are secure from both internal and external threats.

Cyber Security and Privacy Control

Cyber Security and Privacy Control
Author: Robert R. Moeller
Publisher: John Wiley & Sons
Total Pages: 696
Release: 2011-04-12
Genre: Business & Economics
ISBN: 1118035763

This section discusses IT audit cybersecurity and privacy control activities from two focus areas. First is focus on some of the many cybersecurity and privacy concerns that auditors should consider in their reviews of IT-based systems and processes. Second focus area includes IT Audit internal procedures. IT audit functions sometimes fail to implement appropriate security and privacy protection controls over their own IT audit processes, such as audit evidence materials, IT audit workpapers, auditor laptop computer resources, and many others. Although every audit department is different, this section suggests best practices for an IT audit function and concludes with a discussion on the payment card industry data security standard data security standards (PCI-DSS), a guideline that has been developed by major credit card companies to help enterprises that process card payments prevent credit card fraud and to provide some protection from various credit security vulnerabilities and threats. IT auditors should understand the high-level key elements of this standard and incorporate it in their review where appropriate.

Information Systems Management

Information Systems Management
Author: Daniel Alban
Publisher: John Wiley & Sons
Total Pages: 293
Release: 2019-07-02
Genre: Computers
ISBN: 1848218559

Information Systems Management is intended to sensitize the heads of organizations to the issues raised by information systems (IS). Through its pedagogical presentation, the book ensures that issues related to IS are not left solely to the experts in the field. The book combines and analyzes three key concepts of IS: governance, urbanization and alignment. While governance requires the implementation of a number of means, bodies and procedures to manage IS more effectively, urbanization involves visualization methods to enable the manager to take into account the different levels of the organization of an IS and their coherence. Finally, alignment assesses the ability of the IS to make a significant contribution to the organization's strategy.

ISO 27001 Handbook

ISO 27001 Handbook
Author: Cees Wens
Publisher: Independently Published
Total Pages: 286
Release: 2019-12-24
Genre:
ISBN: 9781098547684

This book helps you to bring the information security of your organization to the right level by using the ISO/IEC 27001 standard. An organization often provides services or products for years before the decision is taken to obtain an ISO/IEC 27001 certificate. Usually, a lot has already been done in the field of information security, but after reading the requirements of the standard, it seems that something more needs to be done: an 'information security management system' must be set up. A what? This handbook is intended to help small and medium-sized businesses establish, implement, maintain and continually improve an information security management system in accordance with the requirements of the international standard ISO/IEC 27001. At the same time, this handbook is also intended to provide information to auditors who must investigate whether an information security management system meets all requirements and has been effectively implemented. This handbook assumes that you ultimately want your information security management system to be certified by an accredited certification body. The moment you invite a certification body to perform a certification audit, you must be ready to demonstrate that your management system meets all the requirements of the Standard. In this book, you will find detailed explanations, more than a hundred examples, and sixty-one common pitfalls. It also contains information about the rules of the game and the course of a certification audit. Cees van der Wens (1965) studied industrial automation in the Netherlands. In his role as Lead Auditor, the author has carried out dozens of ISO/IEC 27001 certification audits at a wide range of organizations. As a consultant, he has also helped many organizations obtain the ISO/IEC 27001 certificate. The author feels very connected to the standard because of the social importance of information security and the power of a management system to get better results.

Innovation-Driven Business and Sustainability in the Tropics

Innovation-Driven Business and Sustainability in the Tropics
Author: Emiel L. Eijdenberg
Publisher: Springer Nature
Total Pages: 484
Release: 2023-08-04
Genre: Business & Economics
ISBN: 9819929091

The edited volume presents the conference proceedings from the “Sustainability, Economics, Innovation, Globalisation and Operational Psychology Conference 2023” (SEIGOP 2023), organized by the Centre for International Trade and Business in Asia (CITBA) at James Cook University, Singapore. This edited volume places the highly dynamic, but also, jeopardized climatological – geographical region of the Tropics centre stage. The region is developing rapidly, with significant progress being made through the development of innovative technologies. The Tropics represent a region in which people live amid the greatest level of biodiversity anywhere on the planet. Nonetheless, propelled by rapid population growth, the Tropics is a region on the rise, with higher living standards and increased levels of international trade and investment. Densely populated emerging countries like India, Indonesia and Nigeria will be among the largest economies of the world by the end of the century. These upward socioeconomic trends are compromised by the impact of climate change on the Tropics’ biodiversity. Such developments have forced policymakers, businesses, and local communities to search for more sustainable and creative ways to live and work. For these reasons, this edited volume presents theory-driven conceptual, qualitative, quantitative and mixed-methods studies on the impact of innovation-driven businesses on the complex interplay of socio-cultural, economic, and environmental factors in the Tropics.

Federal Information System Controls Audit Manual (FISCAM)

Federal Information System Controls Audit Manual (FISCAM)
Author: Robert F. Dacey
Publisher: DIANE Publishing
Total Pages: 601
Release: 2010-11
Genre: Business & Economics
ISBN: 1437914063

FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.