Information Technology Control and Audit, Fourth Edition
Information Technology Control and Audit, Fourth Editionis one of a handful of books I think of as a must have reference book on every CIO’s bookshelf or in the IT department library. ... certainly a tremendous reference resource for CIO’s, IT managers of all types and IT auditors who need to be able to crack open a book when dealing with an issue of governance or best practice ideas on setting up IT controls for IT acquisitions. The reasons this book is such a strong reference in those situations is that it aligns to the Control Objectives for Information and Related Technology (COBIT) framework. Which for many people find COBIT to be a better framework than ITIL when designing controls for compliance and doing audit work.... Now I know a lot of CIO’s and senior IT managers might be a bit skeptical that this is a book they should dig into when they have questions or need ideas. But you will find much more credible information in this one book, faster, than you ever will searching for it online.—The Higher Ed CIORead the full review at: http://blog.thehigheredcio.com/2012/10/09/book-review-information-technology-control-and-audit-fourth-edition/#ixzz2TaAb6hMhPraise for Its Bestselling Predecessor:I've been extremely pleased with the textbook. It is the only IT Audit textbook that is representative of how IT auditors actually scope and perform their work. The layout of the book follows the most logical learning progression for a new IT auditor, starting with the understanding of general IT controls prior to teaching application controls. Many other textbooks I reviewed did not follow this logical progression and I found students not fully understanding how application controls are reliant upon the general controls.Information and Technology Control and Auditlays out the logical control reliance to afford students the ability to understand this concept. This has given my students a head start in their respective IT audit roles … .—Rick Savarese, CISA, Vice President of Information Technology and CSO at ECFMG; MIS/Accounting Professor, University of DelawarePrior to becoming a professor I worked for Ernst & Young as a Senior Manager in the Information Technology Audit area for 8 years. I have found this text to be an invaluable asset in teaching my IT Audit classes for the past 5 years. The chapter contents, illustrations, cases, and appendices bring the real world into my classroom making my students ready for their first Information Technology Audit interview and job!—Professor Edward Moskal, Computer & Information Sciences Department, Saint Peter's CollegeI currently teach a class on IT auditing and I have been using Sandra Senft and Frederick Gallegos'Information Technology Control and Audittextbook in my classroom since the Fall of 2009. In my experience, I have found that students have benefitted greatly from the book; I have been able to incorporate many of the topics from the book in my classroom discussions. The book provides a solid foundation in terms of the evolution of IT auditing, including many current drivers such as the changing regulatory and compliance landscape. The book then delves into the process of performing an IT audit, including the use of clear references to our audit standards. Students are then introduced to many technical IT audit topics such as application development, information security and IT operations and support. Throughout, the authors do a nice job of referencing COBIT and other IT risk and control frameworks. Overall, the book is an excellent resource for individuals interested in learning about the profession of IT auditing and compliance.—Jim Enstrom, Adjunct Professor/Lecturer, DePaul University