ACC 624 I . t Auditing Spring, 2013 Ram memory Engira Office: BENT Area 364 Hours: By scheduled appointment ONLY Telephone: Cell (917)597-9523 e-Mail: At present [email, protected] edu or [email, protected] com The Course: This course provides an introduction to controls associated with IT governance, databases and their structures, sites, client computers systems, IT service delivery, business continuity, disaster restoration, IS reliability, cryptography, firewalls, IDS, IPS, backups, restoration, and sent out systems.
Textual content: Required: ISACA, CISA Assessment Manual- 2013, ISACA publication, Code# CRM11- Required
Be aware: You can buy any edition of the aforementioned textual content. 2008, 2009, 2010, and 2011 versions are all great, and are cheap from several sources “CISA Q/A CD-ROM in English- 2011- Recommended not Required, Code # CDB11 CISA Review Questions, Answers, and Explanations- 2011 Advised not Required, Code # CDB11W CISA Assessment Questions (Supplement) , 2011 Recommended not Required, Code # QAE11ES (Note: If you buy CDB11, you don’t have to get CDB11W and QAE11ES) Grading: Mid-Term ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦.. ¦, ¦¦¦¦¦¦¦ ¦. 35% Term Newspaper ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦.. ¦¦¦¦.. ¦¦.. 20% Final Test ¦¦¦¦¦¦.. ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦,.. 35% Class Participation ¦¦¦¦¦.. ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦.. ¦10% Please note ¢ With the exception of documented medical events, there will be simply no make-ups for almost any test. ¢ More than 3 (3) non-excused absences are considered as a computerized withdrawal in the course. (Please let me know, IN ADVANCE, if you cannot enroll in a class because of a legitimate emergency). Note: Power Point Slideshow and Course Handouts as well available on professor’s disk (STJ’s S: Drive). There is no off campus use of this travel, therefore , you should copy these types of files in a diskette for your own personel use at your home.
Professor might also decide to use different electronic means to send the handouts for the students. Varies for Grades: A = 93. one particular to 90 A- sama dengan 90. one particular to 93. 0 B+ = 87. 1 to 90. zero B = 84. you to 87. 0 B- = eighty. 1 to 84. zero C+ = 77. one particular to 70. 0 C = seventy four. 1 to 77. 0 C- sama dengan 70. one particular to seventy four. 0 D+ = 67. 1 to 70. 0 (Undergrads only) D sama dengan 64. one particular to 67. 0 (Undergrads only) D- = 62. 1 to 64. zero (Undergrads only) F sama dengan below 70. 0 EACH WEEK CLASS PLANS: Note: We have a strong probability that collection of insurance coverage of chapters might modify. Week |CHAPTER |DESCRIPTION | |1, two |Instructor Handouts (PP |Financial Auditing, Operational Auditing, IT Auditing, Forensics auditing, position of IIA, ISACA, | | |decks) |certifications of CIA and CISA | | | |IT technological refresher | | | |Introduction to IT Auditing | | | |Theory and Practice of “Controls | |3 |CRM Site 1 |IS Audit Process | |4 |CRM Site 1 |IS Audit Procedure | |5 |CRM Domain name 2 |IT Governance | |6 |CRM Domain two |IT Governance | |7 |CRM Site 3 |System and Facilities Lifecycle Supervision (mid-term) | |8 |CRM Domain several |System and Infrastructure Lifecycle Management | |9 |CRM Domain 4 |IT Service Delivery and Support | |10 |CRM Domain 4 |IT Support Delivery and Support | |11 |CRM Domain five |IS Advantage protection- secureness | |12 |CRM Site 3 |IS Asset protection- security | |13 |Rain/Snow Day Contingency |Business Continuity and Devastation recovery | |14 |Finals |Finals (Cumulative from MOST domains) (35 points) | Course Outline for ACC 624 Domain 1- The IS Review Process: IS DEFINITELY Auditing Standards and Guidelines, Performing a great IS Audit, Control Personal Assessment, Appearing changes in IS USUALLY Audit Process.
Domain 2- IT Governance: Policies and Procedures, Risikomanagement, Information Devices Management Procedures (Personnel Managing, Sourcing Techniques, Organizational Alter Management), Company Structure and Responsibilities (IS Roles and Responsibilities, Segregation of Duties, Auditing THIS Governance Framework and Rendering. Domain 3-Systems and System Life Pattern Management: Job management structure and Practices, Business Program Development (Traditional SDLC levels, alternate Application Development Approaches), Infrastructure Advancement / Purchase in Practices, Information Devices Maintenance Methods, System Expansion Tools and Productivity Assists, Application Controls, Auditing Software Controls, Auditing System Advancement, Acquisition and Maintenance, Organization Application Devices: E-Commerce, EDI, POS, Electronic Systems, EFT, ATM, Photo Processing and so forth
Domain 4- IT Support Delivery and Support: IS Operations, IS Hardware, IS DEFINITELY Architecture and Software, IS Network Infrastructure (OSI model, LAN-WAN, wifi, N/W Operations and Controls), Auditing System and Functions. Domain 5- Protection of Information Assets: Info Security Administration, Logical Access Exposures and Controls, N/W Infrastructure Security, Auditing Information Security Structure, Environmental Exposures and Controls, Physical Access Exposures and Controls. Domain 6- Business Continuity and Disaster Recovery: BC and DR Organizing (BCP procedure, BCP occurrence management, restoration strategies, having a BCP, organization and task of obligations, components of BCP, Plan Screening, Backup and Restoration, Auditing DR and BC Plan. [pic]