The CISM Review Manual 2009 is a comprehensive reference guide designed to assist individuals in preparing for the Certified Information Security Manager® (CISM®) exam and individuals wishing to understand the roles and responsibilities of an IS manager. The manual has evolved extensively over the past five editions and now represents the most current, comprehensive, globally peer-reviewed information security management resource available. In response to the evolving field of information security management, the extensively expanded and revised 2009 version of the CISM Review Manual continues to move away from the subject of technology and closer to the strategic governance and management aspects of security. There is increasing emphasis on the overarching concepts essential for effective information security management in addition to a focus on the critical thinking and sound judgment required for development and management of increasingly massive and complex security systems and related processes. This publication includes a new and expanded approach to the development of effective security management metrics, based on research projects sponsored by the IT Governance Institute. There is a substantial increase in the scope and depth of coverage on risk management. An expanded focus and structural improvement is included for information security program development as well as a greater concentration on architecture and metrics. The improved approach to management metrics has been carried through to the section on information security management, providing processes to improve overall effectiveness. Also included are case studies to assist the candidate in understanding current practices, definitions of terms most commonly found on the exam, practice questions similar in content to the certification exam and references to additional study materials on specific topics. This manual can be used as a stand-alone document for individual study or as a guide or reference for study groups and chapters conducting local review courses. The manual provides a primary reference resource to information security managers seeking global guidance on effective approaches to governance, risk management, program development, management and incident response. The 2009 edition has been developed to help the CISM candidate understand essential concepts and is organized to facilitate study in the following job practice areas: IS governance Information risk management IS program development IS program management Incident management and response

CISM Review Manual 2009

ISACA

Isaca

The CISM Review Questions, Answers & Explanations Manual 2009 consists of 450 multiple-choice study     questions that have previously appeared in the CISM Review Questions, Answers & Explanations Manual 2008     and the 2008 Supplement. These questions are not actual exam items, but are intended to provide the CISM     candidate with an understanding of the type and structure of questions and content that have previously     appeared on the exam. This publication is ideal to use in conjunction with the CISM Review Manual     2009.    To assist the user in maximizing study efforts, questions are presented in the following two     ways:  Job practice area Questions, answers and explanations are sorted by the current CISM job practice     areas. This allows the CISM candidate to refer to questions that focus on one area at a time as well as     to evaluate comprehension of the topics covered within each practice area.  Sample 200-question exam Two hundred of the 450 questions included in the manual are selected to     represent a full-length CISM exam, with questions chosen in the same percentages as the current CISM job     practice areas. Candidates are urged to use this sample test not only to simulate an actual exam, but     also to determine their strengths and weaknesses and to identify those areas that require further study.     Answer sheets and an answer/reference key for the sample exam are also included. All sample test     questions have been cross-referenced to the questions sorted by practice area, making it convenient for     the user to refer back to the explanations of the correct answers.

CISM Questions, Answers & Explanations Manual 2009

The CISA Review Manual 2009 has been extensively revised and updated with new content to reflect changing principles and practices, and is organized according to the current CISA job practice areas. The manual features detailed descriptions of the tasks performed by IS auditors and the knowledge required to plan, manage and perform IS audits. The new edition also features new content based on the IT Assurance Framework (ITAF™) recently published by ISACA. ITAF is a comprehensive assurance model that incorporates standards and good practices, providing guidance on the design, conduct and reporting of IT audit and assurance assignments; defines terms and concepts specific to IT assurance; and establishes standards that address IT audit and assurance professional roles and responsibilities, knowledge and skills, diligence, conduct and reporting requirements. The CISA Review Manual 2009 includes brief chapter summaries that focus on the main topics that a candidate should keep in mind, and new case studies to assist the candidate in understanding current practices. Also included are definitions of terms most commonly found on the exam, practice questions similar in content to what has previously appeared on the exam and references to additional study materials on specific topics. This manual can be used as a stand-alone document for individual study or as a guide or reference for study groups and chapters conducting local review courses. The 2009 edition has been developed to help the CISA candidate prepare for the exam and the manual is organized for study in the following job practice areas:  IS audit process  IT governance  Systems and infrastructure life cycle management  IT service delivery and support  Protection of information assets  Business continuity and disaster recovery

CISA Review Manual 2009

The CISM Review Manual 2010 is a comprehensive reference guide designed to assist individuals in preparing for the CISM exam and individuals who wish to understand the roles and responsibilities of an information security manager. The manual has evolved over the past six editions and now represents the most current, comprehensive, globally peer-reviewed information security management resource available. The CISM Review Manual 2010 features a new format. Each of the five chapters has been divided into two sections for focused study. The first section contains the definitions and objectives for the five areas, with the corresponding tasks and knowledge statements that are tested on the exam. Section One is an overview that provides: <ul>
<li>Definitions for the five areas</li> <li>Objectives for each area</li> <li>Descriptions of the tasks</li> <li>A map of the relationship of each task to the knowledge statements</li> <li>A reference guide for the knowledge statements, including the relevant concepts and explanations</li> <li>References to specific content in Section Two for each knowledge statement</li> <li>Sample practice questions and explanations of the answers</li> <li>Suggested resources for further study</li>
</ul>
Section Two consists of reference material and content that supports the knowledge statements. Material included is pertinent for CISM candidates knowledge and/or understanding when preparing for the CISM certification exam. Also included are definitions of terms most commonly found on the exam. This manual can be used as a stand-alone document for individual study or as a guide or reference for study groups and chapters conducting local review courses. It is a primary reference resource for information security managers seeking global guidance on effective approaches to governance, risk management, program development, management and incident response. The 2010 edition has been developed and is organized to assist candidates in understanding essential concepts and studying the following job practice areas: <ul>
<li>Information security governance</li> <li>Information risk management</li> <li>Information security program development</li> <li>Information security program management</li> <li>Incident management and response</li>
</ul>

CISM Review Manual 2010

Monitoring Internal Control Systems and IT provides useful guidance and tools for enterprises interested in applying information technology to support and sustain the monitoring of internal control. Guidance is provided for the design and operation of monitoring activities over existing IT controls; however, customization of the provided approaches reflecting the specific circumstances of each enterprise are required.The main goal/aims of this publication are to:Complement and expand on the 2009 COSO Guidance of Monitoring of Internal ControlsEmphasize the monitoring of application and IT general controlsDiscuss the use of automation (tools) for increased efficiency and effectiveness of monitoring processesThe shift from conceptual elaboration on the concepts and applications for monitoring provides the following help for the professional and the enterprise to implement monitoring:Diverse examplesCase studiesPractical toolsThis publication will be helpful for:Executives/senior management by providing an executive overview and suggested questions to determine whether the monitoring of internal controls is adequately addressedBusiness process owners by describing how to monitor key IT application controls and how to automate monitoring processesIT professionals by supplying templates and tools that can be leveraged when developing and implementing a monitoring project

Monitoring Internal Control Systems and IT

Computers & Technology

Hardware & DIY

Protecting information assets is challenging for every enterprise, regardless of size and industry, and it has become an even more complex task for enterprises adopting distributed computing environments. Security, Audit and Control Features OracleDatabase, 3rd Edition, provides a new perspective of security and controls over Oracle. This updated edition includes a background and review of security controls and addresses the risks associated with protecting information in a distributed computing environment of various platforms, versions, interfaces and tools. The goal of this popular book is to guide the assessor through a comprehensive evaluation of security for an Oracle database based on business objectives and risks. It examines several different frameworks that can be used to assess security risks and covers technical topics, including an overview of Oracle Database s architecture, operating system controls, auditing and logging, network security, and new features in Oracle 11g (differences from previous versions of Oracle Database are noted, as well as differences that may exist based on the host operating system of the database). Topics in the book include: New security features in Oracle 10g and 11g Enterprise resource planning (ERP) and customer relationship management (CRM) architectures Access controls, application controls and IT general controls Database management and assessment tools Impact of interfaces with legacy systems Developing a strategy to plan the audit Understanding the IT environment Reviewing policies and standards Security, Audit and Control Features Oracle Database, 3rd Edition helps simplify a daunting task, giving readers the approach, knowledge and tools to effectively plan and execute an Oracle Database security assessment.

Security, Audit and Control Features Oracle Database, 3rd Edition

Updated to reflect a new job practice analysis, the CISA Review Manual 2011 is a comprehensive reference guide designed to help individuals prepare for the CISA exam and understand the roles and responsibilities of an information systems (IS) auditor. The manual has been enhanced over the past editions and represents the most current, comprehensive, peer-reviewed IS audit, assurance, security and control resource available worldwide.The 2011 manual is organized to assist candidates in understanding essential concepts and studying the following updated job practice areas:The Process of Auditing Information SystemsGovernance and Management of ITInformation Systems Acquisition, Development and ImplementationInformation Systems Operations, Maintenance and SupportProtection of Information AssetsThe CISA Review Manual 2011 also features an easy-to-use format. Each of the five chapters has been divided into two sections for focused study. Section one of each chapter contains the definitions and objectives for the five areas, as well as the corresponding tasks performed by IS auditors and knowledge statements (required to plan, manage and perform IS audits) that are tested on the exam. It also includes:A map of the relationship of each task to the knowledge statementsA reference guide for the knowledge statements, including the relevant concepts and explanationsReferences to specific content in section two for each knowledge statementSample practice questions and explanations of the answersSuggested resources for further studySection two of each chapter consists of reference material and content that supports the knowledge statements. The material enhances CISA candidates' knowledge and/or understanding when preparing for the CISA certification exam. In addition, the CISA Review Manual 2011 includes brief chapter summaries focused on the main topics and case studies to assist candidates in understanding current practices. Also included are definitions of terms most commonly found on the exam.This manual is excellent as a stand-alone document for individual study and as a guide or reference for study groups and chapters conducting local review courses. It also serves as an effective desk reference for IS auditors

CISA Review Manual 2011

Newly updated, the CISM Review Manual 2011 is a comprehensive reference guide designed to assist individuals in preparing for the CISM exam and individuals who wish to understand the roles and responsibilities of an information security manager. The manual has been continually enhanced over the past six editions and is a current, comprehensive, peer-reviewed information security management global resource.
The 2011 edition assists candidates study and understand essential concepts in the following job practice areas:
<ul>
<li>Information security governance</li>
<li>Inforamtion risk management</li>
<li>Information security program development</li>
<li>Information security program management</li>
<li>Incident management and response</li>
</ul>
The CISM Review Manual 2011 retains the easy-to-navigate format first introduced in 2010. Each of the book's five chapters has been divided into two sections for focused study. The first section contains the definitions and objectives for the five areas, with the corresponding tasks and knowledge statements that are tested on the exam.
Section one of each chapter is an overview that provides:
<ul>
<li>Definitions for the five areas</li>
<li>Objectives for each area</li>
<li>Descriptions of the tasks</li>
<li>A map of the relationship of each task to the knowledge statements</li>
<li>A reference guide for the knowledge statements, including the relevant concepts and explanations</li>
<li>References to specific content in section two for each knowledge statement</li>
<li>Sample practice questions and explanations of the answers</li>
<li>Suggested resources for further study</li>
</ul>
Section two of each chapter consists of reference material and content that support the knowledge statements. The material enchances CISM candidates' knowledge and/or understanding when preparing for the CISM certification exam. Also included are definitions of terms most commonly found on the exam
This manual is effective as a stand-alone document for individual study and as a guide or reference for study groups and chapters conducting local review courses. It is also a primary reference resource for information security managers seeking global guidance on effective approaches to governance, risk management, program development, management and incident response.

CISM Review Manual 2011

The CISM Review Questions, Answers &amp; Explanations Manual 2011 compiles 650 multiple-choice study questions that have previously appeared in the CISM Review Questions, Answers &amp; Explanations Manual 2009, the 2009 Supplement and the 2010 Supplement into one effective resource. These questions are not actual exam items, but are intended to provide the CISM candidate with an understanding of the type and structure of questions and content that have previously appeared on the exam. This publication is ideal to use in conjunction with the CISM Review Manual 2011.
To help exam candidates maximize - and customize - their study efforts, questions are presented in the following two ways:
<ul>
<li>Job practice area - Questions, answers and explanations are sorted by the current CISM job practice areas. This allows the CISM candidate to refer to questions that focus on a particular area as well as to evaluate comprehension of teh topics covered within each practice area.</li>
<li>Sample 200-question exam - 200 of the 650 questions included in the manual are selected to represent a full-length CISM exam, with questions chosen in the same percentages as the current CISM job practice areas. Candidates are urged to use this sample test to simulate an actual exam, but also to determine their strengths and weaknesses in order to identify areas that require further study. Answer sheets and an answer/reference key for the sample exam are also included. All sample test questions have been cross-referenced to the questions sorted by practice area, making it convenient for the user to refer back to the explanations of the correct answers.</li>
</ul>

CISM Review Questions, Answers and Explanations Manual 2011

Cloud computing has become an important emergent issue in business today. As a follow-up to the whitepaper issued in October 2009, ISACA has produced this book to examine assurance in the cloud. The focus is on controls and countermeasures that can be used in the cloud, but it also closely examines how to use the cloud to create value in systems. The book details the issue, why it is important to business, risks, why assurance is critical and how COBIT can help.The book contains an audit program in the appendix. Cloud Computing Management Audit/Assurance Program

IT Control Objectives for Cloud Computing: Controls and Assurance in the Cloud

See the best price to sell, buy, or rent books by ISACA. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by ISACA