Key IS Infrastructure Components and IS Operation Functions. Control Frameworks and Standards IT Audit Process Overview IT Infrastructure Overview IS Management & Operations IT Auditing: Chapter 1 Building an Effective Internal IT Audit Function Chapter 2 The Audit Process Chapter 16 Framework and Standards Week2 (1/25) Information System Overview (Part II): Continue to Introduce Key IS Infrastructure Components and IS Operation Functions. Information System Assets Database and database Administration Practices General Computer Controls Database Audit CISA Quiz #1 CISA Review Manual 2013: 4.3.1; 4.4.3; 4.4.4; 4.4.5; 4.6.1, 4.6.3 IT Auditing: Chapter 3 Auditing Entity Level Controls Chapter 9 Auditing Databases Chapter 18 Risk Management Group Assignment # One Develop an audit planning memo for a General Computer Control audit. Assignment Due Date: 2/19 (2/12) IS Architecture and Operating System Quiz #1 Review Operating Systems Overview Audit Operating Systems CISA Review Manual 2013: 4.4.1; 4.4.2; 4.6.2 IT Auditing: Chapter 6 Auditing Windows Operating Systems; Chapter 7 Auditing Unix and Linux; Week4 (2/19) IS Architecture (continuous) and Network Audit Network Overview Network Security and Administration Overview Audit Network CISA Review Manual 2013: 4.5.1; 4.5.2;4.5.3;4.5.4; 4.6.4 IT Auditing:
CISA Quiz #2 Chapter 5 Auditing Routers, Switches and Firewalls Group Assignment # Two: Develop a Risk Control Matrix (RCM) of the operating system/Databases/Network environment you are going to audit Assignment Due Date: 3/12 Week5 (2/26) Hardware and Software Inventory Management and Software Licensing Quiz #2 Review Inventory Management Software License Management (contract/supporting agreement/license/escrow) Audit Inventory and Software License Regulatory Environment and IT Audit CISA Review Manual 2013: 4.2.8; 4.3.2; 4.4.8;4.4.9 Additional Reading: Gartner: Chapter 17 Regulation Week 7 (3/5) Spring – No Class N/A N/A N/A Week6 (3/12) Service Level Management (Part One): Introduce Service level management components and Service Level Agreement (SLA) monitoring. Outsourcing Practice and Vendor Management Monitoring Outsourcing Practices Establishing a Measureable Service Level Agreement SLA Monitoring and Enforcement Vendor Management and SLA Overview CISA Quiz #3 CISA Review Manual 2013: 4.2.2 Additional Reading: Group Assignment # Three Develop test procedures for an IT entity your team chooses to audit. Assignment Due Date: 3/26
Week 8 (3/19) Datacenter Operation Review Quiz #3 Review Type of Datacenter Operations Turnkey and Outsourced) Maintenance Schedule for HVAC equipment Service Visit Tracking Physical Security Datacenter Audit Overview CISA Review Manual 2013: 4.4.6;4.2.10 IT Auditing: Chapter 4 Auditing Data Center and Disaster Recovery Additional Reading: Group Assignment #Four: Write three high risk findings from the audit your team conducts Assignment Due: 4/2 Week 9 (3/26) Disaster Recovery (DR), Backup and Restoration: (case study # 1) Back Up and Restoration Mechanism and Applications Tape and Disk Management Systems Media Sanitization and Disposal DR Strategy and Alternatives DR Plan Development Measurement of the Adequacy of a DR Plan DR/Business Continuity Plan Audit Overview CISA Quiz #4 CISA Review Manual 2013: 4.7 Additional Reading: Case HBP: Engro Chemicals PK Assignment # Five Chemicals PK case study analysis Presentation Date: 4/2 Week10 (4/2) Information System Maintenance and Data Integrity: (Case Study #2) Quiz #4 Review Security Objectives Security Process Governance Information Security Risk Assessment Information Security Strategy Security Controls Implementation Security Monitoring CISA Review Manual 2013: 4.2.9;4.4.7 Additional Reading:
Week11 (4/9) Application Control Open System Interconnection (OSI) Model OSI Model Application System Interface Control Application Audit Overview Flow Narrative Case Presentation CISA Quiz #5 CISA Review Manual 2012:4.5.5; 4.5.6 IT Auditing: Chapter 8: Auditing Web Servers and Web Applications Chapter 13Auditing Applications Week 12 (4/16) Change Management and Release Management (Case Study #three) Quiz #5 Review Change Management Policies and Procedures Risks Associated with Change Management Controls to Detect or to Prevent Unauthorized Changes Separate Production from Development and Testing Segregation of Duty Approval Procedure Release Management – Notification, Testing and Roll-Out Strategy Change Management Audit Overview CISA Review Manual 2013: 4.2.6; 4.2.7 Effective IT Service Management – Chapter 18 Change Management & Chapter 22 Release Management Additional Reading: Case Study: Care Group Assignment # Six Case Study (HBP) Care Group Analysis Group Presentation Date: 4/23 Week 13 (4/23) Availability, Capacity and Incident Management Capacity Management KPI and Measurement Performance Monitoring Processes and Tools Problem Recording, Tracking, Escalation and Resolving Incident Team and Response Procedures CISA Quiz #6 Effective IT Service Management - Chapter 23 Availability and Capacity Week 14 (4/30) End User Computing and Performance Monitoring Quiz #6 Review Help Desk Request Handling Processing CISA Review Manual 2013: 4.2.5; 4.4.7; 4.6.6; 4.2.4; 4.3.2; 4.3.3; 4.3.4; 4.6.7