IsAuditing.com (Information Systems Audit & Security)
All about IS audit, CISA, and Information Security
At the core of information security is protecting organizational assets, including hardware, software, data, information and people against risks. Any policies and actions taken to help reduce, eliminate or mitigate these risks to assets are called security control. In this article, we will discuss about types of security controls that exist. But before we talk … Read more
One of the core policies in an information security management system is the access control policy. It is also one of the critical domains of ISO 27001 controls. This policy aims to manage and minimize the potential exposure of an organization’s information and data from unauthorized access, which will optimize the confidentiality, integrity, and availability … Read more
Technology empowers our lives and makes them easier, but it brings its own risks called cyber threats. Organizations institute an information security management system (ISMS) to protect themselves better from such malicious attacks and data exposure. In this write up, we will be looking in detail at the definitions of an ISMS, its objectives, and … Read more
If you are studying information security at a university, or you have completed your studies and looking to do some projects based on cyber security to build your portfolio, having a look at the possible topics of such projects is a good idea. It is almost certain that you will be required to complete a … Read more
ISO 27001 is the dominant standard that helps organizations and companies protect their assets against the risk and vulnerabilities of cyber attacks and other IT security and privacy disruptions. The standard provides a well-rounded model for setting up an information security management system with recommended ISO 27001 controls. How ISO 270012022 will benefit your organization: … Read more
From a layman’s perspective, information security architecture (ISA) is one segment of an organization’s enterprise architecture with a laser focus on securing enterprise data and information systems hosting that data. What is information security architecture? A more technical definition is provided by NIST (National Institute of Standards and Technology), which states that the “information security … Read more
Every business needs constant checks and balances to ensure things are happening according to the law. Previously, we talked in detail about internal controls and their impact on a company. It is indeed a helpful practice, but we need more. Perhaps an unbiased opinion from someone who isn’t a part of the company? Someone with … Read more
Financial fraud is an unwanted but possible and existing mishap. They can damage the reputation of an entity and put them under material loss. Do you wish to investigate some financial fraud thoroughly? Forensic procedures are a top-notch solution to that. Fortunately, plenty of forensic accounting firms are constantly growing and providing solutions. Forensic accountants … Read more
As a company, you want to maintain the highest efficiency of your system and product quality. It’s only natural to have an efficient and client-satisfying process. However, you must apply mandatory preventive methods to avoid this. This is where quality assurance auditors jump in. In today’s article, we will talk about QAAs and their role … Read more
An audit is performed on the primary financial statements of a company. Here is everything you need to know about the auditing of financial statements. What Are the Statements Typically Audited? Generally, the auditor wants a detailed review of your company. It is achieved by exploring three out of the five main financial statements. These are: … Read more