The Software Audit Guide

The Software Audit Guide

Author: John W. Helgeson

Publisher: Quality Press

Published: 2009-06-01

Total Pages: 289

ISBN-13: 0873890809

DOWNLOAD EBOOK

Audit – now there’s a word that can strike terror into your heart. Whether it’s the IRS looking over your shoulder or a quality tool utilized by your company, it requires accountability. A software audit monitors the development process and provides management with an independent view of the software development status. The purpose of this book is to remove the terror and error while improving the audit process. Software is not produced on a production line; the only thing that is the same on all software projects is that there is input and output. Everything in the middle is customized for the project at hand. Thus, The Software Audit Guide does not contain a one-size-fits-all approach. It gives a choice of areas to audit and different questions that should be asked within these areas. This book provides a flexible, user-friendly checklist of more than 1,300 questions designed to stimulate creative thinking that will ultimately result in the best possible software audit.


Auditor's Guide to Information Systems Auditing

Auditor's Guide to Information Systems Auditing

Author: Richard E. Cascarino

Publisher: John Wiley & Sons

Published: 2007-06-15

Total Pages: 510

ISBN-13: 0470127031

DOWNLOAD EBOOK

Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." —E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.


Metrics and Models for Evaluating the Quality and Effectiveness of ERP Software

Metrics and Models for Evaluating the Quality and Effectiveness of ERP Software

Author: Geoffrey Muchiri Muketha

Publisher: Engineering Science Reference

Published: 2019-07-26

Total Pages: 0

ISBN-13: 9781522576808

DOWNLOAD EBOOK

"This book presents theoretical measurement models and metrics for measuring software size and complexity of large scale enterprise resource planning software. It focuses on the relationship between software complexity and quality with the aim of controlling quality and on enterprise resource planning development, performance, challenges, and even success stories"--


Software Quality Assurance

Software Quality Assurance

Author: Abu Sayed Mahfuz

Publisher: CRC Press

Published: 2016-04-27

Total Pages: 378

ISBN-13: 149873555X

DOWNLOAD EBOOK

Software Quality Assurance: Integrating Testing, Security, and Audit focuses on the importance of software quality and security. It defines various types of testing, recognizes factors that propose value to software quality, and provides theoretical and real-world scenarios that offer value and contribute quality to projects and applications. The practical synopsis on common testing tools helps readers who are in testing jobs or those interested in pursuing careers as testers. It also helps test leaders, test managers, and others who are involved in planning, estimating, executing, and maintaining software. The book is divided into four sections: The first section addresses the basic concepts of software quality, validation and verification, and audits. It covers the major areas of software management, software life cycle, and life cycle processes. The second section is about testing. It discusses test plans and strategy and introduces a step-by-step test design process along with a sample test case. It also examines what a tester or test lead needs to do before and during test execution and how to report after completing the test execution. The third section deals with security breaches and defects that may occur. It discusses documentation and classification of incidences as well as how to handle an occurrence. The fourth and final section provides examples of security issues along with a security policy document and addresses the planning aspects of an information audit. This section also discusses the definition, measurement, and metrics of reliability based on standards and quality metrics methodology CMM models. It discusses the ISO 15504 standard, CMMs, PSP, and TSP and includes an appendix containing a software process improvement sample document.


Cybersecurity, Privacy and Freedom Protection in the Connected World

Cybersecurity, Privacy and Freedom Protection in the Connected World

Author: Hamid Jahankhani

Publisher: Springer Nature

Published: 2021-05-20

Total Pages: 463

ISBN-13: 3030685349

DOWNLOAD EBOOK

This book provides an opportunity for investigators, government officials, systems scientists, strategists, assurance researchers, owners, operators and maintainers of large, complex and advanced systems and infrastructures to update their knowledge with the state of best practice in the challenging domains whilst networking with the leading representatives, researchers and solution providers. Drawing on 12 years of successful events on information security, digital forensics and cyber-crime, the 13th ICGS3-20 conference aims to provide attendees with an information-packed agenda with representatives from across the industry and the globe. The challenges of complexity, rapid pace of change and risk/opportunity issues associated with modern products, systems, special events and infrastructures. In an era of unprecedented volatile, political and economic environment across the world, computer-based systems face ever more increasing challenges, disputes and responsibilities, and whilst the Internet has created a global platform for the exchange of ideas, goods and services, it has also created boundless opportunities for cyber-crime. As an increasing number of large organizations and individuals use the Internet and its satellite mobile technologies, they are increasingly vulnerable to cyber-crime threats. It is therefore paramount that the security industry raises its game to combat these threats. Whilst there is a huge adoption of technology and smart home devices, comparably, there is a rise of threat vector in the abuse of the technology in domestic violence inflicted through IoT too. All these are an issue of global importance as law enforcement agencies all over the world are struggling to cope.


Internal Audit

Internal Audit

Author: David Coderre

Publisher: John Wiley & Sons

Published: 2008-12-22

Total Pages: 276

ISBN-13: 0470392428

DOWNLOAD EBOOK

Internal Audit: Efficiency Through Automation teaches state-of-the-art computer-aided audit techniques, with practical guidelines on how to get much needed data, overcome organizational roadblocks, build data analysis skills, as well as address Continuous Auditing issues. Chapter 1 CAATTs History, Chapter 2 Audit Technology, Chapter 3 Continuous Auditing, Chapter 4 CAATTs Benefits and Opportunities, Chapter 5 CAATTs for Broader Scoped Audits, Chapter 6 Data Access and Testing, Chapter 7 Developing CAATT Capabilities, Chapter 8 Challenges for Audit,


Government Auditing Standards - 2018 Revision

Government Auditing Standards - 2018 Revision

Author: United States Government Accountability Office

Publisher: Lulu.com

Published: 2019-03-24

Total Pages: 234

ISBN-13: 0359536395

DOWNLOAD EBOOK

Audits provide essential accountability and transparency over government programs. Given the current challenges facing governments and their programs, the oversight provided through auditing is more critical than ever. Government auditing provides the objective analysis and information needed to make the decisions necessary to help create a better future. The professional standards presented in this 2018 revision of Government Auditing Standards (known as the Yellow Book) provide a framework for performing high-quality audit work with competence, integrity, objectivity, and independence to provide accountability and to help improve government operations and services. These standards, commonly referred to as generally accepted government auditing standards (GAGAS), provide the foundation for government auditors to lead by example in the areas of independence, transparency, accountability, and quality through the audit process. This revision contains major changes from, and supersedes, the 2011 revision.


Auditing

Auditing

Author: Raymond N. Johnson

Publisher: Wiley Global Education

Published: 2019-05-20

Total Pages: 733

ISBN-13: 1119404924

DOWNLOAD EBOOK

The explosion of data analytics in the auditing profession demands a different kind of auditor. Auditing: A Practical Approach with Data Analytics prepares students for the rapidly changing demands of the auditing profession by meeting the data-driven requirements of today's workforce. Because no two audits are alike, this course uses a practical, case-based approach to help students develop professional judgement, think critically about the auditing process, and develop the decision-making skills necessary to perform a real-world audit. To further prepare students for the profession, this course integrates seamless exam review for successful completion of the CPA Exam.


Federal Information System Controls Audit Manual (FISCAM)

Federal Information System Controls Audit Manual (FISCAM)

Author: Robert F. Dacey

Publisher: DIANE Publishing

Published: 2010-11

Total Pages: 601

ISBN-13: 1437914063

DOWNLOAD EBOOK

FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.


Standards for Internal Control in the Federal Government

Standards for Internal Control in the Federal Government

Author: United States Government Accountability Office

Publisher: Lulu.com

Published: 2019-03-24

Total Pages: 88

ISBN-13: 0359541828

DOWNLOAD EBOOK

Policymakers and program managers are continually seeking ways to improve accountability in achieving an entity's mission. A key factor in improving accountability in achieving an entity's mission is to implement an effective internal control system. An effective internal control system helps an entity adapt to shifting environments, evolving demands, changing risks, and new priorities. As programs change and entities strive to improve operational processes and implement new technology, management continually evaluates its internal control system so that it is effective and updated when necessary. Section 3512 (c) and (d) of Title 31 of the United States Code (commonly known as the Federal Managers' Financial Integrity Act (FMFIA)) requires the Comptroller General to issue standards for internal control in the federal government.