IT Auditing and Security Risk Management: A Practical Guide to Controls, Compliance, Cyber Risk, and Audit Execution

By Dr. John Adeghe and Dr John Adeghe

IT Auditing and Security Risk Management is a practical, modern guide designed for anyone who needs to understand how technology controls, cybersecurity risk, and audit execution work in real organisations.

Whether you are an aspiring IT auditor, a cybersecurity professional transitioning into governance and compliance, a manager responsible for risk decisions, or a student preparing for a career in IT assurance - this book provides a structured, step-by-step approach to mastering IT audit and security risk management.

Inside this book, you will learn: How the IT audit lifecycle works - from planning to reportingHow to assess risk using likelihood, impact, inherent and residual scoringHow to audit IT General Controls (ITGCs): access, change, operations, incident response, and DRHow to test application controls, audit trails, and data integrityHow to evaluate logging, monitoring, and SOC evidenceHow to assess vulnerability management and patch governanceHow to audit cloud environments (AWS/Azure/GCP) using shared responsibility principlesHow to perform third-party risk management (TPRM) and vendor auditsHow Zero Trust, remote work, and endpoint security reshape audit scopeHow AI security and AI governance introduce new risk domainsHow to write audit findings clearly, assign risk ratings, and drive remediationThis book bridges the gap between technical cybersecurity controls and executive risk reporting, giving you the confidence to audit modern environments and communicate risk professionally.

If you want a guide that is practical, structured, and aligned with today's cyber threats and compliance expectations, this book is for you.

• Format: Paperback
• Language: English
• ISBN: B0GV88T7NX
• ISBN13: 9798253944011
• Release Date: March 2026
• Publisher: Independently Published
• Length: 224 Pages
• Weight: 0.67 lbs.
• Dimensions: 0.5" x 6.0" x 9.0"