The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments [Paperback]

Craig S. Wright (Author)

Book Description

Publication Date: July 4, 2008 | ISBN-10: 1597492663 | ISBN-13: 978-1597492669 | Edition: 1

This book provides comprehensive methodology, enabling the staff charged with an IT security audit to create a sound framework, allowing them to meet the challenges of compliance in a way that aligns with both business and technical needs. This "roadmap" provides a way of interpreting complex, often confusing, compliance requirements within the larger scope of an organization's overall needs.


Key Features:

* The ulitmate guide to making an effective security policy and controls that enable monitoring and testing against them
* The most comprehensive IT compliance template available, giving detailed information on testing all your IT security, policy and governance requirements
* A guide to meeting the minimum standard, whether you are planning to meet ISO 27001, PCI-DSS, HIPPA, FISCAM, COBIT or any other IT compliance requirement
* Both technical staff responsible for securing and auditing information systems and auditors who desire to demonstrate their technical expertise will gain the knowledge, skills and abilities to apply basic risk analysis techniques and to conduct a technical audit of essential information systems from this book
* This technically based, practical guide to information systems audit and assessment will show how the process can be used to meet myriad compliance issues

Product Details

• Paperback: 750 pages
• Publisher: Syngress; 1 edition (July 4, 2008)
• Language: English
• ISBN-10: 1597492663
• ISBN-13: 978-1597492669
• Product Dimensions: 9.2 x 7.6 x 1.5 inches
• Shipping Weight: 2.8 pounds (View shipping rates and policies)
• Average Customer Review: 2.7 out of 5 stars  See all reviews (3 customer reviews)
• Amazon Best Sellers Rank: #1,227,379 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

1 of 1 people found the following review helpful:

2.0 out of 5 stars A beginner's guide to IT Audit, February 28, 2011

By 

Patrick McLendon (Hoover, Alabama USA) - See all my reviews
(REAL NAME)   

Amazon Verified Purchase

This review is from: The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments (Paperback)

I purchased this book hoping, and judging by the title and page count, that it would be helpful in updating our IS department's policies and procedures. I wanted a reference that would help us include the relevant parts of SOX, HIPPA, PCI, COBIT, and the rest of the alphabet soup of regulations and standards into our processes.

Unfortunately, this book is more a guide for beginner IT auditors. It took about 10 minutes for me to realize this, so the fault is mine for not examining the TOC and sample pages more thoroughly before I purchased it. I decided to gleam what I could from it, then pass it on to our Internal Audit department.

As I read the chapters that seemed germane to my project, it became clear that the book was not very well written or edited. I am not a grammar snob; the writing is disjointed, and the grammatical and typographical errors are so frequent they are distracting. I do not recommend this book for beginner auditors because there are better publications available (see the ISACA bookstore online).

1.0 out of 5 stars Absolutely incoherent, October 4, 2011

By 

Occaustin - See all my reviews

Amazon Verified Purchase

This review is from: The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments (Paperback)

I really had hopes for this one.... Very disappointed. First of all, the material is basically a mix of tools one can use (which is helpful) and overarching organizational rhetoric that is as misplaced as it is nonsensical. Secondly, the editing is SO BAD that it makes it impossible to read more than a paragraph. An example: "Permisions be inconsistently applied when the permissions are retained in moving a file is moved to a new directory[sic]" page 400. Absolutley save your money.

1 of 8 people found the following review helpful:

5.0 out of 5 stars Must Have Book, September 12, 2008

By 

Dale Liu (Houston TX USA) - See all my reviews
(REAL NAME)   

This review is from: The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments (Paperback)

If you work in the information technology field - this is a must have book! It is a complete guide to preparing your company for a compliance audit! It takes you from procedure and process to the audit itself!

As I went through this book, I picked up a lot of great information. It covers the relevant laws that we all need to think about!

Dale Liu