A Standard for Auditing Computer Applications is a dynamic new resource for evaluating all aspects of automated business systems and systems environments. At the heart of A Standard for Auditing Computer Applications system is a set of customizable workpapers that provide blow-by-blow coverage of all phases of the IT audit process for traditional mainframe, distributed processing, and client/server environments. A Standard for Auditing Computer Applications was developed by Marty Krist, an acknowledged and respected expert in IT auditing. Drawing upon his more than twenty years of auditing experience with leading enterprise organizations, worldwide, Marty walks you step-by-step through the audit process for system environments and specific applications and utilities. He clearly spells out what you need to look for and where to look for it, and he provides expert advice and guidance on how to successfully address a problem when you find one. When you order A Standard for Auditing Computer Applications, you receive a powerful package containing all the forms, checklists, and templates you'll ever need to conduct successful audits on an easy to use CD-ROM. Designed to function as a handy, on-the-job resource, the book follows a concise, quick-access format. It begins with an overview of the general issues inherent in any IT review. This is followed by a comprehensive review of the audit planning process. The remainder of the book provides you with detailed, point-by-point breakdowns along with proven tools for: evaluating systems environments-covers all the bases, including IT administration, security, backup and recovery planning, systems development, and more Evaluating existing controls for determining hardware and software reliability Assessing the new system development process Evaluating all aspects of individual applications, from I/O, processing and logical and physical security to documentation, training, and programmed procedures Assessing specific applications and utilities, including e-mail, groupware, finance and accounting applications, CAD, R&D, production applications, and more

Standard for Auditing Computer Applications (SACA) offers a detailed, practicable methodology for auditing computer applications. The process that may be required in an automated environment can differ significantly from those used in the old manual environment. The methodology and practices presented in this source offer a practical approach to the auditor with limited data processing skills. It is also a valuable source of information for audit management, aiding in the development of audit plans and programs, in assigning staff, and in increasing audit productivity. SACA is designed to help the auditor evaluate controls in an automated environment, identify system vulnerabilities, and collect and examine the new forms of evidence. The computer itself as an audit tool is stressed-specifically, the use of computer audit software or the equivalent as a data base management query language. SACA is a large, loose-leaf format product that is supplemented with articles twice a year. Each supplement is devoted to a single audit topic, enhanced by appropriate illustrations, including checklists, forms, and workpapers. The workpapers from the main volume and the supplements are also contained on a diskette.