This week`s resource selections originate from a monthly internal audit column I write for Jim Kaplan, for going on more than three years now.
Each month in Jim’s internal audit newsletter (http://www.auditnet.org/) I highlight leading audit and security resources to assist auditors and security practitioners.
Have another great week.
Dan Swanson
Disaster Recovery (DR) and Business Continuity Planning (BCP) resources
This web page provides resources and articles on the subject of DR and BCP that you can use for reviews and planning for audits in this area. http://www.auditnet.org/drp.htm
Auditing IT Initiatives “Thought Leadership” – Particularly Useful When an IT Project Failure is NOT An Option!
Some key questions to consider:
– Does the security aspect of the IT solution work?
– Will the privacy of the organization’s information be maintained?
– Will the staff know how to perform “productively” and accurately?
– Have we done everything necessary to be prepared?
– Are we ready to implement and how do you know it'll work?
http://www.auditnet.org/articles/DSIA200702.htm
Auditing for Fraud “Thought Leadership” – Because bad things are happening
http://www.auditnet.org/articles/DSIA200703.htm
Security Management resources
A variety of information security management resources have been gathered at this one web page
http://www.auditnet.org/SecurityMgmt.htm
Auditing Risk Management is strongly recommended
Some resources to assist your risk management efforts are available at this one web page.
We need to protect personal information much more than ever before and extensive help from the PCI Security Standards Council and numerous other organizations does exist.
http://www.auditnet.org/articles/DSIA200704.htm