Scribd
Upload
199 views

Chandra - Auditing Cloud Computing

This document discusses information system auditing and cloud computing. It provides an overview of IS auditing, including IT governance, risks, benefits, and assurance. It then discusses cloud computing and how it differs from traditional computing by moving servers, networks, storage, and other resources to remote data centers accessed over the internet. The document outlines the stakeholders in IT assurance and describes how IS auditing of cloud computing needs to consider guidance for auditing Software as a Service, Platform as a Service, and Infrastructure as a Service models, potentially using new cloud audit tools.

Uploaded by

wawan_good
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
199 views

Chandra - Auditing Cloud Computing

This document discusses information system auditing and cloud computing. It provides an overview of IS auditing, including IT governance, risks, benefits, and assurance. It then discusses cloud computing and how it differs from traditional computing by moving servers, networks, storage, and other resources to remote data centers accessed over the internet. The document outlines the stakeholders in IT assurance and describes how IS auditing of cloud computing needs to consider guidance for auditing Software as a Service, Platform as a Service, and Infrastructure as a Service models, potentially using new cloud audit tools.

Uploaded by

wawan_good
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 17

Information System

Auditing
and Cloud Computing

Chandra Yulistia, SE Ak CISA CISM


2
Information System Auditing and Cloud Computing

OVERVIEW OF IS AUDIT

3
IT Governance and Management
(read: Headache)

Conformance Performance

Resource
Risks Benefits
s

Evaluate

Direct Monitor

Plan
Built Monitor

Run
4
IT Assurance Universe
(read: Prospect)

nc
M

a
er ty
nc rm
Objective

e ia

s
o

ri

er
pl
IT

u
s

fo
n

th
ec

C e
om
i Controls

O
S R

P
B u t
Information u n o
P i r
Application l l
a d
Infrastructure n

People

IT
Resources 5
IT Assurance Stakeholders
(read: Market)

Standards/Gui Special
Regulations
des Criteria
Independe Certificati Governme
nt on nt
IS Auditor IS Auditor IS Auditor
PUBLIC
USER
INSTITUTION OTHER
INSTITUTION
OWNER
Internal
IS Auditor
CUSTODIAN VENDOR

6
Information System Auditing and Cloud Computing

CLOUD COMPUTING

7
Computing on Earth

CUSTOME
RS OUTPUT

SERVE
RS

NET

VENDO
YOU RS
INPUT
8
Computing at Cloud

CUSTOME
RS

OUTPUT
SERVE
RS

NET

YOU

VENDO
INPUT RS
9
The Cloud of Cloud Computing

10
Information System Auditing and Cloud Computing

AUDIT OF CLOUD
COMPUTING

11
IS AUDIT PROCESS
Conclusio
n

Criteria AUDIT Condition

Evaluatin Collectin
g Evidence g

12
Current IS Auditing

IS
AUDITOR

13
Auditing Cloud Computing

IS
AUDITOR SaaS

PaaS

ISACA and other


guidance on :
Cloud Computing IaaS
Management
Audit/Assurance
Program 14
Auditing Cloud Computing
(example)

15
Future of Cloud Auditing

IS
AUDITOR SaaS
CLOUD
AUDIT
TOOLS
PaaS

IaaS
16
THANKS

[email protected]

17

You might also like