This document, which focuses on the Linux security issues for one of the more popular versions of Linux, Red Hat version 9/Fedora, provides a standard reference for Linux security controls and their audit for security administrators, security professionals and information systems auditors. It provides the following guidance to IT management: * The business and technology drivers for Linux * The vulnerabilities of the Linux operating system * Risk management issues with an action-oriented perspective * Linux security software * How to secure Linux installations to fulfill the control objectives of two well-known standards-COBIT and ISO 17799 * Detailed internal control questionnaires. Call +1.847.253.1545 ext. 401, visit www.isaca.org/bookstore or e-mail [email protected] for more information.

Current best practices and future trends in ERP issues are documented in a practical how-to guide to enable auditors and risk professionals (both IT and non-IT) to evaluate risks and controls in existing ERP implementations and to facilitate the design and building of better practice controls into system upgrades and enhancements. This is the first in a series of technical and risk management reference guides dealing with the world's three major ERP packages: SAP, Oracle Financials and PeopleSoft. SAP is one of the leading developers of enterprise applications worldwide. Its primary ERP product is SAP R/3. FAQs, audit programs, ICQs, references and tips for the assurance professional regarding SAP's Audit Information System and mySAP.com also are provided, making this publication an invaluable resource in today's environment. Call 1-847-253-1545 ext. 401, visit www.isaca.org/bookstore or e-mail [email protected] for more information.