April 19, 2010

Information Technology Audit and Risk Management (Sample Syllabus)

Thanks to Mark Salamasick at the University of Texas-Dallas for contributing this syllabus.

This course covers management's role in controlling information technology and addressing the major risks related to technology. Topics include information security, contingency planning, desktop computer controls, systems development controls, computer center operation controls, assurance of information related to on-line, client-server, web-based, internet, and other advanced computer systems. Students will learn approaches to evaluating and addressing technology risk throughout the organization from the perspective of internal and external audit in addition to the view of end users. Topics included in the class will include coverage of all areas to prepare students to take the Certified Information Systems Auditor (CISA) exam.