Information Technology Control Guidelines, 3rd Edition

The 3rd edition carries on the tradition of excellence of the past two best-selling editions and provides a practical means of identifying, understanding, assessing and implementing information technology controls in all types of enterprises. Each chapter is grouped by similar areas of concern, control or process and outlines the control objective, the minimum control standards and control techniques for each issue.

Sample chapters include:

• Responsibility for risk management and control
• Information systems acquisition, development and maintenance
• Information Technology security
• Business Continuity and Disaster Recovery Planning
• Application based control

The principle of technology independence ensures the information in this study can be applied to all types of platforms (including PC's, Mainframes, LAN's, WAN's, etc.) as well as new and emerging technologies. Risk management is another principle that is interwoven throughout the book and the nature of risk and the relationships between risk, control and exposure are explored.
ISBN: 0-88800-494-X
Publication Date: 1998
Number of Pages: 414