Auditing IT Infrastructures for Compliance (Information Systems Security & Assurance)

PART OF THE NEW JONES & BARTLETT LEARNING INFORMATION SYSTEMS SECURITY & ASSURANCE SERIES!

Information systems and IT infrastructures are no longer void from governance and compliance given recent U.S.-based compliancy laws that were consummated during the early to mid-2000s. As a result of these laws, both public sector and private sector verticals must have proper security controls in place. Auditing IT Infrastructures for Compliance identifies and explains what each of these compliancy laws requires. It then goes on to discuss how to audit an IT infrastructure for compliance based on the laws and the need to protect and secure business and consumer privacy data. It closes with a resource for readers who desire more information on becoming skilled at IT auditing and IT compliance auditing.

Martin M. Weiss (CISSP, SSCP) manages a team of information security gurus at RSA, the security division of EMC, and has over 15 years of experience in information security, risk, governance, and control Author and coauthor of numerous books on information technology, he is on the board of directors for the ISSA Connecticut and is a member of ISACA.
Michael G. Solomon (CISSP, PMP, CISM, GSEC) is a full-time security speaker, consultant, and author, and a former college instructor who specializes in development and assessment security topics. He has also contributed to various security certification books, including CISSP Study Guide (Sybex, 2003), Security + Training Guide (Que, 2003), and Information Security Illuminated (Jones & Bartlett, 2005).