Compliance By Design: IT Controls That Work

Description

A must have book for anyone who is looking to develop awareness and deeper insight into IT controls, strategies and techniques to solve compliance challenges!
Compliance by Design: IT controls that work, brings a refreshing perspective (and language) to the rather mundane world of IT controls and compliance. Unlike your typical audit/compliance textbooks that can be dry, idealistic or prescriptive in tone, this book is written in a fun, accessible prose yet not afraid to tackle grey areas.

Moving away from traditional efforts

Traditional efforts in attaining or sustaining IT compliance employ an outside-looking-in approach characterised by capturing varied compliance requirements and/or frameworks and applying these within the organisation. This book advocates an inside-looking-out approach emphasising fundamental ideas of good control design as the basis for developing effective and sustainable IT compliance strategies.

Tools and techniques

Intended to arm you with the tools and techniques to put in place the right system of internal controls, the focus is on IT controls, but with plenty of references to business and entity controls too.

About the author

Chong Ee has a proven IT audit and compliance track record in large and small companies. With a background spanning Big Four systems consulting and audits, business analysis and Sarbanes-Oxley compliance, Chong is presently the Director of the Compliance and Accounting Process for ZipRealty, Inc. With a passion for bridging multi-disciplinary perspectives, Chong has presented at conferences such as InfoSec World and SCCE's Annual Compliance and Ethics Institute and published articles in the Internal Auditor, ISACA and ISSA journals. Chong is a Certified Information Systems Auditor (CISA) and Certified in the Governance of Enterprise IT (CGEIT).