The Computer and Internet Fraud Manual

Rating:
Summary: Covers fundamentals and professional standards
Review: This short (171-page) book is published by the Association of Certified Fraud Examiners and provides an approach to identifying and preventing computer fraud that is consistent with that organization's body of knowledge and practices.

Part I, "Understanding and Identifying Computer Fraud" consists of none chapters that begin with a discussion of the legal issues and factors associated with computer fraud, technical fundamentals that include common threats (intrusions, viruses, fraud schemes and hacking), and specific topics about internet and e-commerce fraud.

Part II covers detecting and preventing computer fraud, with excellent material on how to properly handle evidence and work with law enforcement professionals during the response phase. This section also contains a brief treatment of applications and systems security, and detailed chapters on security auditing and implementing policies.

While this book is not especially comprehensive, it does cover the major topics that need to be taken into consideration if you're involved in corporate fraud management, but are not familiar with the technical basics of computer and internet fraud. It is also an excellent resource for the IT security professional who may be knowledgable of IT security practices, but not well versed in fraud detection and prevention.