How to select a CAAT
CAAT stands for Computer Assisted Audit Techniques
This is a common thing of discussion among IS Auditors is "which one is best - CAATs or Manual method of IS Audit". Sometimes manual method is not enough to find out effective and efficient IS Audit results. On the other hand in many instances use of CAATs gives less efficient results than corresponding manual IS Audit methods.
Monday, November 24, 2008
How to select a CAAT
Tuesday, September 2, 2008
Integrated Test facility for CISA Exam
f the IS auditor is very comfirtable with the database and application and he is wll aware of flow of data, then only he should use this techniques. Otherwise this will be very difficult to differentiate two types of data.
read more | digg story
Use of Sequence Check as CAAT tool
Sequence Check is an important CAAT tool which is mainly used in:1. Validation Control2. Processing ControlThis a way by which w ensure whether a set of data is :1. properly ordered or sequenced or out of ordered2. within a predefined limit or range or out of predefined range
read more | digg story
Saturday, August 16, 2008
IT auditing is more about people than technology
IT auditors' biggest battle isn't the technology, but people who are on the defensive. Read this tip from author Peter Gregory, CISA, CISSP on how to overcome the people side of IT audits.
read more
What an Audit Charter should document
Audit Charter/Engagement Letter should clearly documentØ AccountabilitiesØ AuthoritiesØ Purpose/Scope &Ø Responsibilities ................
read more | digg story
Subscribe free via email
My Favourite Blog List
Blog to watch
Labels
- Access Control (1)
- Anti-Virus (2)
- Article from Others (47)
- backup and Recovery (1)
- CAAT (1)
- Cryptography (1)
- Cyber Security (11)
- Data Protection (6)
- Data Security (10)
- Decision Support System (1)
- DMZ (1)
- Error detection (2)
- Firewall (2)
- Firewall audit (2)
- Google (1)
- Hacking (4)
- Identity Stealing (3)
- IDS (1)
- Information Security (51)
- internet (5)
- IS Audit (5)
- IT Risk (3)
- Kerberos (1)
- Media disposal (1)
- Network Security (2)
- Networking (1)
- OpenID (1)
- Outsourcing (1)
- password (1)
- Penetration Testing (3)
- PKI (1)
- Privacy (1)
- Programming (1)
- SAS 70 (1)
- Single Sign-on (1)
- Social Engineering (1)
- SSO (1)
- sysAdmin (1)
- System Administration (1)
- Vulnerability Assessment (1)
- Web security (4)
- Wireless network (2)
- WLAN (1)