0 01011101110101001000101000101111010101100001010011101011010010101001101011010010101001000101 1 10a0101010010100010101010101110111010100100010100010111101010110000010011101011010010101001 How to Perform 0100010 an IT General 00101000101010010111011 00100 01010 111010101100000100 Controls Review 101010010100010101010101110111010100100010100010111101010110000010011101011010010101001000101 001010001011 101000101010101001110100010100110101101000101010111011101010010 101011000001001110101101001001001000101010010100010101010101110111010100100010100010111100110 10101 100111000001001 011000001001 11101011010010101001 101010010100010101010101110111010100100010100010111101010110000010011101011010010101001000101 1010001010101010111011101010000010011 101011010010 101010001010101001001010 0101101 Using COBIT to Audit 0101110101001010111101100110101010100101010101011100000101110101010100110111 ® 11IT Infrastructure Components 0101000110101111101010111010101 ª Identify the control issues that must be addressed to ensure the integrity, confidentiality, and availability of your information systems August 20-22, 2007 Chicago, IL ª Discover the critical components that require review in IT infrastructures September 19-21, 2007 Las Vegas, NV ª Cover the COBIT® 4.0 framework and how you can use it to evaluate the effectiveness of your IT general controls October 1-3, 2007 Toronto, ON ª Develop strategies for assessing the key controls in your information systems infrastructure December 3-5, 2007 Boston, MA ª Find out how to conduct a business impact analysis that will ensure your organization can survive a disruptive event The International Leader in Audit & Information S e c u r i t y Tr a i n i n g www.misti.com E-Z Access ITG201 Training Audit and Infosecurity Professionals for Over 29 Years Seminar Focus and Features In this three-day seminar you will examine the IT general control areas that must be addressed to ensure the confidentiality, integrity, and availability of your information assets. You will explore critical aspects of the IT environment, including IT governance, IT infrastructure controls, information security, physical security, disaster recovery, change management and network perimeter security.You will learn how to develop strategies for assessing the key controls in your information systems infrastructure. In addition, because Control Objectives for Information and related Technology (COBIT®) provides an effective controls framework for both IT management and IT audit, you will cover the COBIT 4.0 control framework and throughout the seminar focus on how you can use this industry-recognized framework for evaluating the effectiveness of your IT general controls.You will pay particular attention to using COBIT control objectives and control practices to strengthen IT controls and as a means to plan, scope and assess control compliance. Prerequisite: IT Auditing and Controls (ITG101) or equivalent experience. Learning Level: Basic NASBA: Computer Science Who Should Attend Financial, Operational, Business Applications, Information Technology, and External Auditors; Quality Assurance personnel; Audit Managers and Directors; Information Security Managers and Analysts What You Will Learn 1. Risk-Based Audit Planning for IT General Controls • introduction to IT general controls • the relationship between general and application controls • risks/controls • centralized vs. distributed environments • Sarbanes-Oxley and IT controls 2. IT Control Standards and Frameworks • COSO • ISO-17799 and ISO-27001 • COBIT 4.0 - what is COBIT? - COBIT objectives/components - COBIT information requirements - IT resources - COBIT navigation - metrics and maturity Model - COBIT control hierarchy - COBIT audit guidelines/control practices - auditing using COBIT 3. IT Governance and Operations Management • COBIT control objectives • IT organizational structure • policies and procedures • strategic planning • risk management • IT human resources practices • quality management • separation of duties • outsourcing • audit steps 4. Hardware/Software Infrastructure • COBIT control objectives • hardware infrastructure - centralized vs. distributed - hardware acquisition, contracts, and inventories - equipment maintenance/utilization - hardware audits • software infrastructure: operating systems - components - risks/exposures - patch management - operating system audits • software infrastructure: database management - components - restart/recovery/reliability - database advantages/concerns - distributed databases - database administration controls - database audits • system software audit steps 5. Logical Access Controls • COBIT control objectives • access control components • authentication: passwords, tokens, biometrics • authorization of user access rights • managing user accounts • access control systems • audit trail • security monitoring • remote access • sensitive data on PCs and workstations • security administration • single sign-on (SSO) authentication • access control best practices 6. Physical and Environmental Controls • COBIT control objectives • physical security objectives, risks, and exposures • physical security controls Registration Information • environmental exposures and risks • environmental controls 7. Network Perimeter Security • COBIT control objectives • network security threat/risk analysis • network security strategy • data communication software • OSI Model • TCP/IP • firewalls/DMZ • intrusion detection systems • remote access/wireless access • Internet risks 8. Change Management • COBIT control objectives • change management risks • translation from source code to executable modules • change management process • vendor-supplied source code • library/change control software • distribution systems version control • audit steps 9. Disaster Recovery and Business Continuity Planning • COBIT control objectives • disasters and disruptive events • disaster recovery and business continuity planning • business impact analysis (BIA) • recovery time objectives (RTO) • disaster recovery strategy • business continuity strategy • disaster recovery sites • disaster recovery teams • off-site storage • data backup and recovery • telecommunications networks • testing the recovery plan • continuity plan maintenance • contract requirements • audit steps 10.Planning and Executing General Control Reviews • risk assessment • audit strategy and planning • planning memo • key documents needed for the audit • audit programs • testing controls • audit workpapers • audit report Mail: The registration form along with your check to MIS Training Institute, 498 Concord Street, Framingham, MA 01702-2357 Call: (508) 879-7999 Fax: (508) 872-1153 E-mail: [email protected] Web: www.misti.com E-Z Access ITG201 IMPORTANT: Please refer to the registration code on the mailing panel when registering. Tuition: Tuition is $1795 and covers course materials, refreshments, and hospitality reception. It does not cover hotel accommodations. Add $100 if you register 5 business days or less before your session start date.Tuition must be paid in advance by cash, company check,VISA, MasterCard, AMEX, or Diners Club. (Add 6% GST for Toronto session.) Class Hours: Class is conducted from 8:30 am - 5:00 pm daily and concludes at 1:00 pm on the last day. CPE Credits: 22 CPEs. If you are a CISSP we will forward your credits to (ISC)2. Please provide your CISSP number on the registration form. MIS Cancellation Policy: A full refund less a $100 administrative fee will be given for cancellations received up to 15 days before the event.Tuition is non-refundable for cancellations made 14 days or less before the event.You may, however, transfer your tuition to another MIS Training Institute event, less a $195 administrative fee.Transfers are valid for 12 months from the time of initial cancellation. Substitutions are welcome at any time.Those who do not cancel before the event date and who do not attend are responsible for the full non-refundable, non-transferable tuition.To cancel, call customer service at 508-879-7999. The High-Yield/No-Risk Guarantee: Attend this seminar and receive information, tools, and techniques that will help you do your job better. If you do not, simply tell us why on your company letterhead within 30 days of the event and we will give you a full credit toward another seminar. Hotel Information: Hotel arrangements should be made after you register for a seminar to ensure lowest available rates. Please contact the hotel directly (phone numbers are listed below) and be sure to inquire about corporate, AAA, AARP, or other discounts for which you may be eligible. Chicago: Palmer House Hilton 312-726-7500 Las Vegas: Harrah’s Las Vegas 702-369-5000 Toronto: Westin Harbour Castle 416-869-1600 Boston: Hilton Boston Back Bay 617-236-1100 Schedule Changes: MIS may occasionally find it necessary to reschedule or cancel sessions and will give registrants advance notice of such changes. MIS will not be responsible for penalties incurred as a result of non-refundable airfare purchases, or hotel reservations. Avai la In-H ble ouse C Mim all i Ha tc 410692 h at for d -2465 etail s. 0 01011101110101001000101000101111010101100001010011101011010010101001101011010010101001000101 The International Leader 1How to Perform in Audit & Information 10a0101010010100010101010101110111010100100010100010111101010110000010011101011010010101001000 S e c u r i t y Tr a i n i n g an IT General 010001000101000101111 0101000101010101001110100010100110101101000101010111011101010010 Controls 010101100000100111010110100100100100010101001010001010101010111011101010010001010001011110011000 Review 00100111000001001001010001010100101110111010100100 498 Concord Street 101010010100010101010101110111010100100010100010111101010110000010011101011010010101001000101010 Framingham, MA 01702-2357 PRSRT STD U.S. POSTAGE PAID AYER, MA PERMIT #9 01010 111010101100000100 011000001001 11101011010010101001000 IMPORTANT: Please refer to the Registration Code below when you register. “Great balance between details and real-world examples. Good logical flow.” Registration Code: ITG201F / PDF - Daniel Frey, Senior IT Audit Analyst, Sun Microsystems www.misti.com E-Z Access ITG201 Registration Form Name ■ Mr. ■ Mrs. ■ Ms. ■ Dr. ■ Prof. For Name Tag Please register me for the following: Industry ■ August 20-22, 2007, Chicago, IL ■ September 19-21, 2007, Las Vegas, NV ■ October 1-3, 2007,Toronto, ON ■ December 3-5, 2007, Boston, MA Job Title Organization/Company No. of Employees E-Mail (Required) Address – State/Province City Phone Zip + 4/Postal Code Mail Stop/Floor Country Fax Approving Manager Please send: ■ MIS’ Course Catalog ■ FREE TransMISsion Online Newsletter Title (Provide e-mail address above) CISSP # Payment Options: Fee: $1795.00 ■ Check enclosed (payable to MIS Training Institute) ■ MIS PERC # ■ Charge to my: ■ VISA ■ MasterCard ■ AMEX ■ Diners Club Account # Expiration Date Signature Cardholder’s Name/Zip Code CVV2# ■ MISTI Online-Training ■ Information on MIS IT Audit Certificate Programs ■ Information on In-House Seminars ■ MIS Training Weeks ■ The Annual Conference on Control and Audit of Information Technology Credit Card Billing Address City State/Province Zip+4/Mail Code Country ■ Please make changes to my mailing label. Fax (508) 872-1153 The International Leader in Audit & Information S e c u r i t y Tr a i n i n g 498 Concord Street, Framingham, MA 01702-2357 Phone: (508) 879-7999 E-mail: [email protected] Web: www.misti.com Contents of this brochure copyright © 2007 MIS Training Institute, Inc.All rights reserved. Printed in U.S.A. The information you provide will be safeguarded by MIS Training Institute LLC, a part of the Euromoney Institutional Investor PLC Group, whose subsidiaries may use it to keep you informed of relevant products and services. As an international group, we may transfer your data on a global basis for the purposes indicated above. If you object to contact by: l telephone l fax l email, please check the appropriate box.We occasionally allow reputable companies outside the Euromoney Institutional Investor PLC group to contact you with details of products and services that may be of interest to you. If you do not want us to share your information with other reputable companies, please check this box l.
© Copyright 2024