I. Introduction. 1. Overview of information systems auditing. 2. Conducting an information systems audit. Ii. The management control framework. 3. Top management controls. 4. Systems development management controls. 5. Programming management controls. 6. Data resource management controls. 7. Security management controls. 8. Operations management controls. 9. Quality assurance management controls. Iii. The application control framework. 10. Boundary controls. 11. Input controls. 12. Communication controls. 13. Processing controls. 14. Database controls. 15. Output controls. Iv. Evidence collection. 16. Audit software. 17. Code review, test data, and code comparison. 18. Concurrent auditing techniques. 19. Interviews, questionnaires, and control flowcharts. 20. Performance measurement tools. V. Evidence evaluation. 21. Evaluating asset safeguarding and data integrity. 22. Evaluating system effectiveness. 23. Evaluating system efficiency. Vi. Information systems audit management. 24. Managing the information systems audit function.