INFORMATION SYSTEMS CONTROL AND AUDIT
MOST IMPORTANT TESTED AREAS – MAY 2016
All topics of study material is important. Here with I am highlighting priority areas for study
Highlighted portion are Most Important
Compiled by CHAKRAVARTHI MURALI – “Best of Luck and Wish you a Grand Success in Life”
[
1
Arrangement of Chapters based on weightage of marks
Chapter – I – Concept of Governance (18 to 22 Marks)
Enterprise Governance framework (and) major benefit of governance
Key benefits of GEIT
Best practices of corporate governcnce
Describe 4 contents of annual control report of management
Internal control as per COSO
4 broad classifiction of strategic planning
Key Management Practices - Aligning IT strategy with enterprise strategy
Meaning of Asset, Vulnerability, Threat, Exposure, Likelihood, Attack and risk
Risk Management Strategies
Key Management Practices - Risk Management
COBIT 5 – Component, Benefits and Enablers
Key Matrics for assessing compliance process
Evaluating IT Governance structure and practice by internal auditor
Areas of review by internal auditor as a part of review of GRC
Key Management Practices for assessing and evaluating internal control
Chapter – III – Protection of Information of Systems (18 to 22 Marks)
Information security objective (and) what information is sensitive
Information security policy and their hierarchy
Critical control lacking in a computerized environment
Impact of technology on internal control
Preventive, Detective, Corrective and compensatory control
Common physical access control technique
Asynchronous attacks – various types
Six activity of system development management controls
Boundary control – Techniques
Access control mechanism – 3 steps
Date base control – Update and Report control
Various output controls
Six caterories of integrity controls (and) Data interity policies
Financial control – Techniques
Impact of cyber frauds on enterprises
Techniques’ to commit cyber fraud
INFORMATION SYSTEMS CONTROL AND AUDIT
MOST IMPORTANT TESTED AREAS – MAY 2016
All topics of study material is important. Here with I am highlighting priority areas for study
Highlighted portion are Most Important
Compiled by CHAKRAVARTHI MURALI – “Best of Luck and Wish you a Grand Success in Life”
[
2
Chapter – VI – Audit of Information Systems (18 to 22 Marks)
Effect of computer on audit
Set of skills expected with an IS Auditor
5 types/categories of IS Audits
6 Stages of information system audit
Important task of auditor as part of preliminary evaluation
Legal consideration and audit stansard as part of preliminary review
4 steps to be followed for risk based approach and 3 categories of risk
Inherent limitation of an audit
SCARF – Techniques
Continuous and intermittent simulation
Audit trail objective
Accounting & Operational audit trail – Input & Communication control
Understanding the layers and related audit issues
Chapter – II – Information systems concepts (14 to 18 Marks)
Information system attributes
Important characteristics of CBIS
TPS – Key activities, Components, basic features
Knowledge level system – (i) OAS; (ii) KMS
MIS – Major misconception; Pre-requiste
DSS – Characteristics
EIS – Characteristics
MIS – Constraints
Element of core banking system
Chapter – V – Development of system (12 to 16 Marks)
Prototying & Agile model
Prototyping model strength and weaknesses
System requirement specification – objectives and documentation
Fact finding techniques
Analysis of present system
System desigining
Method of validating vendor proposal
Good coded program – characteristics
Unit testing & System testing
Implementation strategies
Implementation activities
System Maintenance
INFORMATION SYSTEMS CONTROL AND AUDIT
MOST IMPORTANT TESTED AREAS – MAY 2016
All topics of study material is important. Here with I am highlighting priority areas for study
Highlighted portion are Most Important
Compiled by CHAKRAVARTHI MURALI – “Best of Luck and Wish you a Grand Success in Life”
[
3
Chapter – IV – Business Continuity Planning ( 9 to 12 Marks)
Meaning, Objective and Goals of Business Continuity Planning
3 advantages of BCM & BCM policy objectives
Methodology of BCP & Business Impact Analysis
Component of BCM process diagram
BCM documentation and records
BCM information collection process
Short notes on risk assessment
Maintenance tasks undertaken in development of BCP
Types of back-up (and) back-up options
DRP Documentation
Sound methodology of business resumption planning
Chapter – VII – Information Technolgy Issues ( 9 to 12 Marks)
Objective of the IT Act
Section 43, 44, 66A, 79
SEBI & RBI – system audit
PDCA cycle
Why company adopt ISO 27001 and Its key benefits
Chapter – VIII – Emerging Technologies ( 9 to 12 Marks)
Cloud computing – Characteristics
Cloud computing – security and implementation issues
Mobile computing - Benefits
Green computing
Web 2.0 & Major components
Categories of social networks
Compiled by CHAKRAVARTHI MURALI
Author of Direct Tax Laws Quick Insight
Entire Portion is covered in less than 200 Pages
100% Exam Oriented Approach. Easy to complete portion in a week
who is in Emploment and have time constrains.
Send an e-mail to quickinsightdt@gmail.com for sample chapters
“Best of Luck and Wish you a Grand Success in Life”