Understanding and Conducting Information Systems Auditing + Website

A comprehensive guide to understanding and auditing modern information systems This comprehensive guide focuses on ensuring confidentiality, integrity, and availability of information system resources. It features examples that are applicable globally and covers all major standards. It takes a non-technical approach to the subject and presents IS as a management tool with practical applicability. It explains in detail how to conduct information systems audits and provides all the tools and checklists needed to do so. Further, it introduces the concept of information security grading, which allows readers to implement practical changes and solutions in their organizations.