Goodbye DIACAP, Hello DIARMF
When C&A becomes A&A, will you be ready?
Every few months, an elite group of DoD security experts, IT managers, and senior leadership gather to chart...
Management, compliance & auditing
ISO27002 Security Framework – Audit Program Template
Several people have asked for an IT Audit Program Template for an audit based on the ISO/IEC 27002:2005(E) security standard. This template, which can be...
IT Auditing and Controls – Information Technology Basics
Information Technology Basics
In its most basic form, information technology (IT), can be reduced down to IPO. No that’s not an Initial Public Offering,...
IT Auditing and Controls – IT Governance and Controls
“IT Governance and Controls” or “IT Monitoring and Assurance Practices for Board and Senior Management”
Take your choice of titles of this article,...
IT Auditing and Controls – An Introduction
Introduction to IT Audit
Auditing is an evaluation of a person, organization, system, process, enterprise, project or product, performed to ascertain the validity...
IT Auditing and Controls – An Overview
So you want to be an IT Auditor…..
Over the course of the next few weeks, I will be posting some ten articles to help you understand what it takes to move...