Information Technology Audit Handbook

Rating:
Summary: Addresses business and technology issues - RECOMMENDED!
Review: This book provides a unique approach that blends traditional IT auditing with business goals and objectives. Using the auditing strategy that Mr. Dayton outlines you can develop a valid baseline of your IT operational posture and its alignment to company strategy and tactics.

In addition to the audit and alignment baseline, the information gained from an audit performed in accordance with the methods given in this book also forms a complete "as is" picture. This is useful for determining where to put resources for improvement initiatives, or for determining if a complete reengineering of IT is in order. As I read through this book the strong emphasis on business issues outside of the boundaries of IT led me to conclude that a complete audit based on this approach should be a prerequisite for establishing a governance or program management office function.

The book itself is not exactly a page turner because the writing is somewhat dry. However, the approach and the wealth of worksheets and checklists (also provided on the accompanying disk) compensate for this. Among the parts of this book that I especially like are: (1) strategic business worksheets, which when completed and compiled will give a comprehensive picture of the company's business posture (it's unfortunate, but true, that this information will be a surprise to many IT departments), (2) Chapter 6 on evaluating new technologies, which takes a life cycle view of technology evaluation and selection, (3)Chapters 10 through 12, which cover recruiting, evaluating, managing and training technical personnel and working with consultants. These chapters provide a clear and unbiased assessment for the HR side of IT. The information here can also be used to develop policies, processes and procedures for human resource management, and will also provide a solid foundation if you elect to measure your organization against Software Engineering Institute's People Capability Maturity Model.

This book is an excellent resource for management and technology consultants, and larger IT organizations. The worksheets alone are worth many times the price of the book, but the true value is the way the author integrates IT and business factors into a comprehensive audit method. Highly recommended and earns 5 stars.