Control, management and audit issues

 

One of the most important aspects of the IT Faculty's work concerns control, management and audit issues. Many of the Faculty's events and publications deal with such issues. For example:

• Implications of E-commerce for Auditors and Business Advisers
• Effective Protection from Computer Viruses
• Introducing the Data Protection Act 1998
• A Management Guide to BS7799
• Using Digital Signatures: The Issues

The following links to organisations - some of whom the Faculty co-operates with - may also be helpful:

• The Information Systems Audit and Control Association (ISACA): international site
• ISACA UK Chapters' sites
• The British Computer Society Information Risk Management and Audit Group (IRMA)
• The Institute of Internal Auditors (IIA)
• Info Security News
• Auditnet
• The IT Governance Institute (ITGI)
• Measuring the effectiveness of an internal control system

The ITGI has released a discussion document on the IT Control Objectives for Sarbanes-Oxley. This document is available for "complimentary download" from the ITGI site (link above).