BTM440: Information Systems Risks, Security and Audit

Introduction

Security fundamentals

• Module A: Security concepts
• Module B: Enterprise security strategy
• Module C: Security program components
• Summary

Risk management

• Module A: Understanding threats
• Module B: Risk management programs
• Module C: Security assessments
• Summary

Cryptography

• Module A: Cryptography concepts
• Module B: Public key infrastructure
• Summary

Network connectivity

• Module A: Network attacks
• Module B: Packet flow
• Summary

Network security technologies

• Module A: Network security components
• Module B: Monitoring tools
• Summary

Secure network configuration

• Module A: Secure network protocols
• Module B: Hardening networks
• Summary

Access control

• Module A: Access control principles
• Module B: Account management
• Summary

Secrets of a Successful Auditor

• Understanding the Demand for IS Audits
• Understanding Policies, Standards, Guidelines, and Procedures
• Understanding Professional Ethics
• Understanding the Purpose of an Audit
• Differentiating Between Auditor and Auditee Roles
• Implementing Audit Standards
• Auditor Is an Executive Position
• Understanding the Corporate Organizational Structure
• Summary
• Exam Essentials
• Review Questions

Managing IT Governance

• Strategy Planning for Organizational Control
• Overview of Tactical Management
• Planning and Performance
• Overview of Business Process Reengineering
• Operations Management
• Summary
• Exam Essentials
• Review Questions

Audit Process

• Understanding the Audit Program
• Establishing and Approving an Audit Charter
• Preplanning Specific Audits
• Performing an Audit Risk Assessment
• Determining Whether an Audit Is Possible
• Performing the Audit
• Gathering Audit Evidence
• Conducting Audit Evidence Testing
• Report Findings
• Conducting Follow-Up (Closing Meeting)
• Summary
• Exam Essentials
• Review Questions

Networking Technology Basics

• Understanding the Differences in Computer Architecture
• Selecting the Best System
• Introducing the Open Systems Interconnect Model
• Understanding Physical Network Design
• Understanding Network Topologies
• Differentiating Network Cable Types
• Connecting Network Devices
• Using Network Services
• Expanding the Network
• Using Software as a Service (SaaS)
• Managing Your Network
• Summary
• Exam Essentials
• Review Questions

Protecting Information Assets

• Understanding the Threat
• Using Technical Protection
• Summary
• Exam Essentials
• Review Questions

Business Continuity and Disaster Recovery

• Debunking the Myths
• Understanding the Five Conflicting Disciplines Called Business Continuity
• Defining Disaster Recovery
• Defining the Purpose of Business Continuity
• Uniting Other Plans with Business Continuity
• Understanding the Five Phases of a Business Continuity Program
• Understanding the Auditor Interests in BC/DR Plans
• Summary
• Exam Essentials
• Review Questions