Describe the Steps in the Information System Security Audit Process
Define the scope of an audit. Decisions need to be made in groups. Information Systems Audit Methodology Wikieducator An automated audit is a computer-assisted audit technique also known as a CAAT. . The various activities involved in defining an audit program include audit checklists resource planning and consistency in tests. Audit steps performed and audit evidence gathered Use of services of other auditors and experts Audit findings conclusions and recommendations The documentation should also include evidence of supervisory review and the report that was issued as a result of the audit work. The first thing you need to do is to establish the scope of your audit. Perform the auditing work. Identify threats Next look at the assets you plan to audit and list the potential threats next to each one. Audits can have different purposes. Here are details of activities that you will be doing in each step of au...