Performing IT Audits - Part 2

Scheduled Dates (sort by: location | date)

Course Overview

This course follows on from Performing IT Audits - Part 1, with which it can be combined to form a three day programme. It will cover in more detail the areas of cybercrime, computer forensics and data analytics. The basic approach is the same, to exploit vulnerabilities in the computer environment - invisibility, speed, remoteness and concealment.

The growth in cybercrime has led to the need for a new branch of crime investigation called computer forensics. No matter how hard the criminal tries to conceal himself there are often sufficient traces of his activity to allow for his activity to be tracked. Delegates will be introduced to the concepts of data analytics and how they can be used to identify anomalies in the data.

The leader of this course is both an investigator and a computer forensics specialist who has acted as an expert witness in a number of high profile cases.

Audience

Auditors and anybody that is responsible for internal IT security.

Course Outline

CYBERCRIME

• Types of cybercrime
• Use of computers in cybercrime
• Cyber terrorism - your organisation may well be a target

PROTECTING YOUR ORGANISATION

• Threat analysis
• Threat management
• Prevention mechanisms
• Detection action

COMPUTER FORENSICS

• The rules
• The initial steps
• What needs to be examined?
• Record keeping
• Tools and techniques
• Evaluation

MAKING THE CASE

• What is 'evidence'?
• What is 'proof'?
• Lining up your argument
• Dealing with the legal representatives
• The opposition

DATA ANALYTICS

• Selecting records that conform to particular criteria
• Extracting selected records for detailed examination
• Obtaining totals and subtotals from a file
• Reporting on file contents by value bands ('stratification')
• Searching for duplicate transactions
• Searching for gaps in sequences
• Comparing the contents of two (or sometimes more) files, and extracting either record matches (where none should match) or exceptions (where all should match)
• Sampling

Performing IT Audits - Part 2 / CM032744