tailieunhanh - IS AUDITING PROCEDURE FIREWALLS

The use of a formal Rapid-Start Program is an effective way to ensure quick results. A Rapid-Start Program is a project management technique that maps various actions, audits and initiatives to be completed in the first 100 to 120 days. A Rapid-Start Program includes specific strategic and tactical initiatives, including initial audit fieldwork that should be occurring simultaneously. The plan includes projected target dates and milestones to measure progress, identify issues and make adjustments as needed. The use of a Rapid-Start Program also helps prevent escalation of the start-up process and ensures that fieldwork begins as soon as possible | InformationSystems Audit andCộntrol Association IS AUDITING PROCEDURE FIREWALLS DOCUMENT P6 Introduction The specialised nature of information systems IS auditing and the skills necessary to perform such audits require standards that apply specifically to IS auditing. One of the goals of the Information Systems Audit and Control Association ISACA is to advance globally applicable standards to meet this need. The development and dissemination of the IS Auditing Standards are a cornerstone of the ISACA professional contribution to the audit community. Objectives The objectives of the ISACA IS Auditing Standards are to inform IS auditors of the minimum level of acceptable performance required to meet the professional responsibilities set out in the ISACA Code of Professional Ethics for IS auditors Management and other interested parties of the profession s expectations concerning the work of practitioners The objective of the IS Auditing Procedures is to provide further information on how to comply with the IS Auditing Standards. Scope and Authority of IS Auditing Standards The framework for the IS Auditing Standards provides multiple levels of guidance a Standards define mandatory requirements for IS auditing and reporting. e Guidelines provide guidance in applying IS Auditing Standards. The IS auditor should consider them in determining how to achieve implementation of the standards use professional judgment in their application and be prepared to justify any departure. e Procedures provide examples of procedures an IS auditor might follow in an audit engagement. Procedures should not be considered inclusive of any proper procedures and tests or exclusive of other procedures and tests that are reasonably directed to obtain the same results. In determining the appropriateness of any specific procedure group of procedures or test the IS auditor should apply their own professional judgment to the specific circumstances presented by the particular information systems .

TỪ KHÓA LIÊN QUAN
crossorigin="anonymous">
Đã phát hiện trình chặn quảng cáo AdBlock
Trang web này phụ thuộc vào doanh thu từ số lần hiển thị quảng cáo để tồn tại. Vui lòng tắt trình chặn quảng cáo của bạn hoặc tạm dừng tính năng chặn quảng cáo cho trang web này.