Auditing Information Systems

About the Book

The role of the information systems auditor is not just about compliance and performance testing but goes beyond by adding value to the enterprise through being an IS advisor to management. This book, whilst covering all the necessary skills in IS auditing, also focuses on the role of the IS auditor in enhancing the performance of the enterprise. The IS auditor is a key member of the enterprise and ensures that technology is used appropriately, protects data, and provides a secure environment. The book outlines the IS audit process in detail, enabling the reader to acquire necessary skills on how to conduct an IS audit. Included in the book are other formative skills, such as IT general controls, applications controls, IT governance, information security, IT risk, and disaster recovery. The book also covers all the necessary technologies an IS auditor requires to learn and understand in order to be an effective auditor. A good flair for technology is a must for one to be a good IS auditor. The book focuses on both learning the technology and developing appropriate evidence-gathering skills.

About the Author

Abraham Nyirongo is an IS audit practitioner, researcher, and corporate trainer. He has been in the information technology profession for over twenty years, having worked in various IT roles and organisations. He has provided IT audit advisory services for various organisations, which include Citibank, Standard Chartered Bank, Stanbic Bank, Bank of Zambia, and Zambia Revenue Authority. He worked in IT advisory services for several years at KPMG and also served on the ISACA CISM test enhancement committee. He is currently the managing consultant at Cyberskills Consulting. Abraham is a holder of a master of science degree (MSc) in information technology from Aspen University and a master’s degree (MBA) in business administration from Heriot-Watt University. He is a certified information systems auditor (CISA). He also holds other certifications in information security (CISM), information technology governance (CGEIT), and project management (PMP).