Auditing Skills: Computer Auditing - Part 2

Course Overview

This course follows on from Computer Auditing - Part 1, with which it can be combined to form a three day programme. It will cover in more detail the areas of cybercrime, computer forensics and data analytics.

The basic approach is the same, to exploit vulnerabilities in the computer environment - invisibility, speed, remoteness and concealment. The growth in cybercrime has led to the need for a new branch of crime investigation called computer forensics. No matter how hard the criminal tries to conceal himself there are often sufficient traces of his activity to allow for his activity to be tracked.

Delegates will be introduced to the concepts of data analytics and how they can be used to identify anomalies in the data.

Audience

This course is for computer auditors, computer audit managers and planners, security officers, risk managers and their staff, developers and administrators from sensitive environments with a strong security remit and procurement agents with an interest in security specifications.

Course Outline

CYBERCRIME

• Types of cybercrime
• Use of computers in cybercrime
• Cyber terrorism - your organisation may well be a target

PROTECTING YOUR ORGANISATION

• Threat analysis
• Threat management
• Prevention mechanisms
• Detection action

COMPUTER FORENSICS

• The rules
• The initial steps
• What needs to be examined?
• Record keeping
• Tools and techniques
• Evaluation

MAKING THE CASE

• What is 'evidence'?
• What is 'proof'?
• Lining up your argument
• Dealing with the legal representatives
• The opposition

DATA ANALYTICS

• Selecting records that conform to particular criteria
• Extracting selected records for detailed examination
• Obtaining totals and subtotals from a file
• Reporting on file contents by value bands ('stratification')
• Searching for duplicate transactions
• Searching for gaps in sequences
• Comparing the contents of two (or sometimes more) files, and extracting either record matches (where none should match) or exceptions (where all should match)
• Sampling

Auditing Skills: Computer Auditing - Part 2 / CM030600