Volume 6, 2009 

Book Reviews
CPE Quiz
Features
Achieving Continuous IT Auditing:  RICA
Dale Johnstone and Ellis Chung Yee Wong, CISA, CFE, CISSP
Cloud Computing:  An Auditor’s Perspective
Sailesh Gadia, CISA, ACA, CPA, CIPP
Five Questions
Five Questions With...
Gary Langham, CISA, CISM, CGEIT, CPFA, CISSP
Guest Editorial
Connections Galore!
Sekar Sethuraman, CISA, CISM, CGEIT, CIA, CSQA, PMP
HelpSource Q&A
HelpSource Q&A
Gan Subramaniam, CISA, CISM, CIA, CISSP, SSCP, CCNA, CCSA, ISO 27001 LA
Information Security Matters
Data Plumbing?
Steven J. Ross, CISA, CBCP, CISSP, MBCP
IT Audit Basics
What Every IT Auditor Should Know About IT Risk Assessment
Tommie W. Singleton, Ph.D., CISA, CITP, CMA, CPA
Online Exclusive
JOnline: Healthcare Fraud: Auditing and Detection Guide
Reviewed by Vishnu Kanhere, Ph.D., CISA, CISM, AICWA, CFE, FCA
JOnline: Managing Sarbanes-Oxley Section 404 Compliance in ERP Systems Using Information Security Control Reports
Abhik Chaudhuri, MCA, PMP, Dipanwita Chaudhuri, ACA (ICAI), MIIA and Robert E. Davis, CISA, CICA
Standards, Guidelines, Tools and Techniques
Taking a Look Back
The Law of Unintended Consequences? Assessing the Costs, Benefits and Outcomes of the Sarbanes-Oxley Act
Michael Alles, Ph.D., Alexander Kogan, Ph.D., and Miklos Vasarhelyi, Ph.D.
Translated Articles