Training Courses

ITAM-300-AMP: IT Audit for IT Managers: Hot Topics: IT Audit & IT Management Partnership

CPE credits: 7

Description: In today's evolving virtual markets and highly complex, global corporate environments, information technology professionals, operational, financial, and IT auditors must all work together in helping to establish, implement and secure organizational infrastructure from both internal and external threats.

This seminar will provide the attendee with an insight into the most critical and sensitive areas of an organization, areas which are increasingly being examined by an organization's internal audit function. Internal controls and security are examined with an objective of gaining a better understanding of the audit concerns related to securing and controlling an organization's IT environment.

This seminar will provide a unique opportunity for your organization's IT management and professional staff to become acquainted with the role and responsibilities of your organization's internal audit function and more specifically, the organization's IT audit professional.

Audience: IT Managers, system administrators, managers of telecommunications, directors of security, safety and continuity planning, and IT professionals who through their involvement in managing or directing IT infrastructure will eventually be requested, by their organization's internal and/or external audit function, to participate in an examination of IT operations under their authority.

This particular seminar would also be of value to financial and operational audit professionals considering a career move into IT auditing as well as non-IT audit professionals tasked with the responsibility for assessing their organization's IT operations and infrastructure.

Prerequisites: There is no prerequisite for this seminar.

Objectives: After completing this seminar, participants will:

Have a working knowledge of the current risks, threats and exposures facing 21st century organizations doing business in virtual global marketplaces
Be prepared to assist their organization in securing its operations, minimize its security exposure, and avoid becoming the victim of an attack
Identify the various uses of Internet technology and learn how the changing roles of this technology in an e-business environment can jeopardize the reliability of information both from a management and an audit point-of-view
Evaluate E-commerce risk assessment and controls
Determine that an e-business organization faces new threats to the safeguarding of its assets, and that the access to those assets is often managed via IT-systems. Further, manipulation of those systems could lead to unauthorized use of assets
Explain the countermeasures used to protect organizations against attack
Describe the latest risks involved when providing Internet services to staff
Conduct an assessment and technical review of their organization's Internet and Web-based systems
Identify the risks associated with outsourcing
Determine incident responses and priorities in a cyber forensic investigation
Develop policies for the preservation of computer evidence

Course Outline:

· Controlling Outsourcing Agreements and Application Service Providers

· Conducting Business in Virtual Markets: Controlling and Securing Electronic Commerce

· Privacy Issues Responding To a Globe Market Concern

· Cyber Crimes, Criminals and Threats to IT Infrastructure

· Web Security; An Audit Point-Of-View

· Basic Cyber Forensics, What Every IT Manager Should Know

Dr. Marcella's seminar will draw upon his 29 years of field experience in the areas of corporate, data, IT and physical security and his roll as a Board of Director member for the Saint Louis community InfraGard project, a Board of Governor member for the Saint Louis Institute of Internal Auditors and as a member of the Saint Louis Cyber-Terrorism Task Force.

Back to training courses.

IT Management Consulting, Training Services, and Audit & Security Reviews Since 1984