IS Audit and Control Virtual Cases

A major problem in auditing education is giving the student the experience of actually auditing a company.  In the IS audit, this experience includes access to a system and auditing of the system. To give the student some real world experience, with the gracious support of the PwC Foundation [which is not responsible for any errors], we developed a group of cases. The purpose is to have the student access client computers, use software to evaluate the controls in place, and write reports of what they found and their evaluation of the controls in place. VMware is used to create virtual personal computers that are part of a virtual system so that the student can operate in a safe environment where any errors will not matter. Virtual systems are commonly used by developers as a test environment for the same reason. If you encounter problems or have comments, let us know and we will attempt to solve the problem. Please direct questions to isaudit@vt.edu or to Sam Hicks, at shicks@vt.edu.

The IS Audit & Control DVD includes nine virtual cases. We should note that 110 copies of these cases were distributed at the 2008 AAA Annual Meeting in Anaheim, CA in August, 2008.   Also, another 70 DVDs were distributed in September to professors requesting the cases.  The cases include the following topics:

1) Installation of VMware
2) Install/Configure Windows Server 2003 Virtual Machine
3) Segregation of Duties
4) Change Management
5) Auditing Windows Security
6) Auditing Linux Security
7) Password Auditing
8) Compensating Controls
9) Web Application Security

If you would like to request a copy, please send an e-mail to Sam Hicks at shicks@vt.edu.

Back to Contents Page