BUSINESS
INTEGRITY TESTING METHODOLOGY MANUAL (BIT)
The
BIT is the definitive resource for testing integrity and security
controls in business processes and systems. Defining test cases for
accountancy, human resources, inventory, financial securities, business
practices, etc., this manual is aimed at providing a new tool for
discovering security and privacy weaknesses, circumventions,
corruption, fraud, embezzlement, theft, and other deceptive, illegal,
or unethical practices.
The methodology in the BIT will allow a microscopic look at a business
process as well as the big picture to tie together a multitude of
processes. Once these processes are analyzed for security and safety
weaknesses, levels of risk for each weakness can be financially or
conceptually determined for justification measures. BIT results can
also be mapped back to COBIT, ISO 17799, and CMM levels. This allows
BIT to be both an efficient and practical manner for testing the
security of business process and a method for enhancing current audit
methodologies.
If you are interested in helping with this project please contact us at
bit<at>isecom.org.
Not
yet available for download.