1. Overview of IS Auditing n Need for control and Audit of Computers –Org cost of data loss –cost of incorrect decision –Value of hardware, software, personnel –High cost of computer error –Maintenance of privacy –Controlled evolution of computer use

2. Cost of Computer Abuse n Hacking n Viruses n Illegal physical access n Abuse of privileges

3. Consequences of Abuse n Destruction of Assets n Unauthorized use or theft of Assets n Modification of Assets n Privacy Violation n Disruption of Operation n Physical harm to personnel

4. Defining IS Audit n Process of collecting and evaluating evidence n determine whether the computer system n safeguards assets, maintains data integrity, n achieve organizational goals effectively and n uses resources efficiently.

5. Effect of Computers on Internal Controls n Internal Controls: policies and procedures to safeguard tangible and intangible assets against unauthorized use and abuse.

6. Internal Controls n Separation of Duties n Delegation of Authority and Responsibility n Competent and Trustworthy Personnel n Systems Authorization n Adequate Documents and Records

7. Effects of Computers on Auditing n Changes to evidence collection n Changes to evidence evaluation

8. Foundation of IS Audit n Traditional Auditing n Information Systems Management n Behavioral Science n Computer Science

9. Internal Controls n Adequate Documents and Records n Physical Control over Assets and Records n Adequate MGT Supervision n Independent Checks on Performance n Comparing Recorded Accountability with Assets