The aim of this subject is to provide students with the knowledge and skills necessary to identify security problems that may arise in an electronic business environment. The course includes exploring how technologies may be used to prevent or resolve security problems.

Upon completion of this course, students should be able to: 1. Explain the concepts of IT audit; 2. Understand the legal and ethical issues concerning of IT auditing; 3. Identify the auditor’s objectives in performing an audit of a computerized information system; 4. Understand the methods auditors use to assess control risk in computerized information systems; 5. Identify and describe the general and application controls found in computerized information systems and the methods used to assess risk for these controls; 6. Identify and describe hardware and systems software controls and how they impact computerized information systems; 7. Understand system security controls and the impact of these controls on the overall reliability of computerized information systems.