Browse Information Systems and Controls (ISC)
-
-
- 3.1 COSO Internal Control – Integrated Framework: Relevance to Information Systems
- 3.2 COSO ERM for IT: Risk Management Across Digital Environments
- 3.3 COBIT 2019 Overview: Governance System Principles and Components
- 3.4 Other Influential Standards and Regulations (e.g., PCI DSS, HIPAA, GDPR)
- 3.5 ITIL and IT Service Management Overviews
-
-
- 10.1 Change Control Concepts: Policies and Procedures
- 10.2 Environments and Testing (Development, QA/Staging, Production)
- 10.3 Patch Management: Risks and Controls
- 10.4 Continuous Integration and Continuous Deployment in Modern DevOps
- 10.5 Systems Development Life Cycle (SDLC): Waterfall vs. Agile/DevOps
-
-
-
-
-
Chapter 19: Data Confidentiality and Privacy Controls
In this section
-
Distinctions Between Confidentiality and Privacy
Explore the differences between confidentiality and privacy, examining corporate vs. personal data, compliance triggers, and key business constraints for CPA professionals navigating today’s data-driven environment.
-
Encryption Techniques and Key Management
Explore encryption fundamentals, the differences between symmetric and asymmetric methods, and effective key management strategies for CPAs and IT auditors.
-
Data Loss Prevention (DLP) Tools and Strategies
Learn how to safeguard sensitive data with DLP solutions that monitor email, endpoints, and cloud environments, preventing unauthorized exfiltration.
-
Privacy Laws and Rules (HIPAA, GDPR, Other Jurisdictional Mandates)
Explore HIPAA, GDPR, and diverse jurisdictional mandates governing data privacy, highlighting essential compliance tips, data subject rights, and potential penalties.
