Questions:
1. Explore different ways that IT delivers value to a business and its role in codifying Administrative, Technical, and Physical (ATP) Controlsspecific to SAS 70, Safe harbor provision, and HIPAA data retention. Highlight the benefits of proactive IT deployment strategies towards risk, compliance, and information security to the corporation and its stakeholders.
2. Identify and explain the COBIT framework for IT governance to safeguard daily operations, audit and performance mechanism, and its role in managing data retention, archive, and destruction. Include the need to plan and organize domain control objectives.
3. Explain SOX and Segregation of duties as it is related to effective management and standardized frameworks such as COBIT best practices.
4. Explain COBIT's attempt to address ethical issues and "due care" obligations behind information services.
5. Explain Management responsibility under SOX and highlight there role where it is specific to section 404. Include why this is significant from an information technology viewpoint considering SOX provides little to know actual guidance related to IT.
6. Describe the purpose of Basel 2 sections 744 and 745 and include an example of how vicarious liability could become a factor.
7. Describe COBITS methods of IT performance measurement techniques and the self-auditing and corrective action principle behind the COBIT framework.
8. What is the difference between self-assessment and 3rd party assessments, and the role assessments play in regard to audits and the data retention requirements associated for auditors.
9. What are the requirements for internal controls for large and small company's and explain the purpose of circular A-123 and it is related to each.
10. Identify and Explain the components of COSO and how COSO could be integrated with a balanced scorecard framework.
11. Explain the legal foundation that establishes data and electronic systems as private property specifically in regard to computer forensics, include the procedures required for chain of custody, securing a computer crime scene, the steps needed to ensure a computer crime scene is not contaminated, and the legal distinctions between acceptable use and the Rules of Evidence.
12. Explain the Deming PDCA model and how it could be relevant to compliance project management. Provide an example.