Information Systems Auditing and Assurance

Rating:
Summary: Audit and Control
Review: I use this book as the basic text in my university course on computer auditing for CA's (CPA's to you south of the 49th) because it is the best text out of a bad lot. At times, Hall is concise and to the point. On occasion, for example in ch's 8 and 9 when he describes the audit of a receivables and a payables systems, his advice is detailed and valuable. Most of the time, though, he wanders into side issues in too much depth, ignores the concepts of risk and control, provides superficial advice and examples on CAAT's (despite the inclusion of the ACL disk, which, although stripped down, is worth the price of admission) and is just too thin on practical discussions of auditing in an EDP environment.

Rating:
Summary: Audit and Control
Review: I use this book as the basic text in my university course on computer auditing for CA's (CPA's to you south of the 49th) because it is the best text out of a bad lot. At times, Hall is concise and to the point. On occasion, for example in ch's 8 and 9 when he describes the audit of a receivables and a payables systems, his advice is detailed and valuable. Most of the time, though, he wanders into side issues in too much depth, ignores the concepts of risk and control, provides superficial advice and examples on CAAT's (despite the inclusion of the ACL disk, which, although stripped down, is worth the price of admission) and is just too thin on practical discussions of auditing in an EDP environment.