This manual provides practical guidelines on how to perform internal and external audit functions concerning computer security. There is also discussion of what to audit and why. All procedures are illustrated by means of the work programs given in each chapter. This is the first systematic audit guide for auditing computer security, covering methodology, mainframes, mini"s, micro"s, related audit concerns, and control guidelines.