Information Technology Audit Handbook [Hardcover]

Doug Dayton (Author)

Book Description

Publication Date: April 1997

Provides information to evaluate emerging technology for businesses. The workbook features: a questionnaire to help readers evaluate their current systems and needs for data input, storage, management and security; two audit case studies; and a step-by-step plan to analyze technology audit results.

Product Details

• Hardcover: 352 pages
• Publisher: Prentice Hall; Har/Dskt edition (April 1997)
• Language: English
• ISBN-10: 0136143148
• ISBN-13: 978-0136143147
• Product Dimensions: 9.3 x 6.7 x 1.1 inches
• Shipping Weight: 1.6 pounds
• Average Customer Review: 5.0 out of 5 stars  See all reviews (1 customer review)
• Amazon Best Sellers Rank: #2,882,903 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

5.0 out of 5 stars Addresses business and technology issues - RECOMMENDED!, July 19, 2001

By 

Mike Tarrani "www.tarrani.com" (Deltona, FL USA) - See all my reviews
(COMMUNITY FORUM 04)    (REAL NAME)   

This review is from: Information Technology Audit Handbook (Hardcover)

This book provides a unique approach that blends traditional IT auditing with business goals and objectives. Using the auditing strategy that Mr. Dayton outlines you can develop a valid baseline of your IT operational posture and its alignment to company strategy and tactics.

In addition to the audit and alignment baseline, the information gained from an audit performed in accordance with the methods given in this book also forms a complete "as is" picture. This is useful for determining where to put resources for improvement initiatives, or for determining if a complete reengineering of IT is in order. As I read through this book the strong emphasis on business issues outside of the boundaries of IT led me to conclude that a complete audit based on this approach should be a prerequisite for establishing a governance or program management office function.

The book itself is not exactly a page turner because the writing is somewhat dry. However, the approach and the wealth of worksheets and checklists (also provided on the accompanying disk) compensate for this. Among the parts of this book that I especially like are: (1) strategic business worksheets, which when completed and compiled will give a comprehensive picture of the company's business posture (it's unfortunate, but true, that this information will be a surprise to many IT departments), (2) Chapter 6 on evaluating new technologies, which takes a life cycle view of technology evaluation and selection, (3)Chapters 10 through 12, which cover recruiting, evaluating, managing and training technical personnel and working with consultants. These chapters provide a clear and unbiased assessment for the HR side of IT. The information here can also be used to develop policies, processes and procedures for human resource management, and will also provide a solid foundation if you elect to measure your organization against Software Engineering Institute's People Capability Maturity Model.

This book is an excellent resource for management and technology consultants, and larger IT organizations. The worksheets alone are worth many times the price of the book, but the true value is the way the author integrates IT and business factors into a comprehensive audit method. Highly recommended and earns 5 stars.