Fundamentals of Information Risk Management Auditing

Kick-start your career in information risk management with this introductory guide.

New information and IT risks seem to be everywhere, and so it is essential that organisations address these risks in the context of enterprise risk management. Fundamentals of Information Risk Management Auditing provides insight and guidance on this practice for those considering a career in information risk management, and is an introduction for non-specialist auditors and managers.

Fundamentals of Information Risk Management Auditing gives an interesting and useful insight into the risks and controls/mitigations that you may encounter when performing or managing an audit of information risk.

This book also features case studies and chapter summaries to provide the best grounding in information risk available for risk managers and non-specialists alike.

Look inside this book >>

This book covers:

• What is risk and why is it important?
• Risks and controls
• Enterprise risk management (ERM) frameworks
• Risk management assurance and audit
• Information risks and frameworks
• Introduction to general IT and management risks
• Overview of general IT and management risks
• Security and data privacy
• System development and change control
• Service management and disaster planning
• Introduction to application controls
• Overview of application controls (integrity)
• Life as an information risk management specialist
• Planning, running and reviewing risk management assignments
• Personal development and qualifications