This title provides the necessary tools that an auditor needs in order to ensure that a corporation's IT platforms are adequately secure. It includes a practical rather than theoretical view of how to conduct security audits of IT platforms and provides numerous checklists and diagrams.

A complete and definitive guide to auditing the security of IT systems for managers, CIOs, controllers, and auditors This up-to-date resource provides all the tools you need to perform practical security audits on the entire spectrum of a company's IT platforms-from the mainframe to the individual PC-as well as the networks that connect them to each other and to the global marketplace. Auditing and Security: AS/400, NT, Unix, Networks, and Disaster Recovery Plans is the first book on IT security written specifically for the auditor, detailing what controls are necessary to ensure a secure system regardless of the specific hardware, software, or architecture a company runs. The author uses helpful checklists and diagrams and a practical, rather than theoretical, method to understanding and auditing a company's IT security systems and their requirements. This comprehensive volume covers the full range of issues relating to security audits, including: Hardware and software Operating systems Network connections The cooperation of logical and physical security systems Disaster recovery planning

Security Management.
Physical Security.
IBM AS/400 Architecture and Applications.
AS/400 Audit Objectives and Procedures.
Windows NT Server: Security Features.
Unix.
Networks.
Disaster Recovery Planning.
Index.