Wendy Goucher 
Information Security Auditor 
Careers in information security

The role of an information security (or assurance) auditor is vital for identifying security gaps in an organisation’s information systems. This practical book gives an excellent introduction to the role, covering areas such as purpose, required skills, responsibilities, interface and career progression as well as tools, standards and frameworks related to the role. It gives practical guidance to those new to the role or interested in developing a better understanding of what it entails.

表中的内容

Preface

1. Introduction 

2. Overview of the field               

3. The Role of Information Assurance Auditor    

4 Building a Model Information Assurance Auditor          

5. Interface and dependencies

6. Tools, methods and techniques           

7. Career progression and related roles

8. Case study ‘A day in the life of an auditor’      

9. And so

关于作者

Wendy Goucher is a senior security consultant. Most of her work is focused on working with organisations to devise policy and procedures that are both compliant with external rules and operationally effective. This can be an interesting balancing act for which her first degree in psychology is useful.