Course Syllabus

Course Information：

Year-Semester Course Number Course Name Phase Credits Hours Required/Elective Instructor Class Student NO. Withdraw Note

Fall Semester
Year 2026 364541 Information Security and System Audit 1 3.0 3 ★ Yu-Chih Wei GIFM
MSIS 30 0 資財所和創新資安合開

Year-Semester	Course Number	Course Name	Phase	Credits	Hours	Required/Elective	Instructor	Class	Student NO.	Withdraw	Note
Fall Semester Year 2026	364541	Information Security and System Audit	1	3.0	3	★	Yu-Chih Wei	GIFM MSIS	30	0	資財所和創新資安合開

Course Plan：

Instructor Yu-Chih Wei　Office Hours

Email vickrey@mail.ntut.edu.tw

Last Updated 2026-06-05 15:30:02

Course Objective 來自於內部與外部的攻擊使企業在系統及網路保護遭遇許多挑戰，為了有效控制企業風險，政府在內部控制相關法規明確要求資訊系統相關的內部控制，而電腦稽核為確保內部控制的關鍵角色。本課程內容以國際電腦稽核師(CISA)認證的各項領域內容為主。期望學生能夠對於瞭解資訊系統稽核及其風險管理相關概念有初步的瞭解，進而瞭解資訊安全及資訊系統稽核的機制與手法，作為協助學生順利考取國際電腦稽核師(CISA)認證碁石。 Internal and external attacks have caused enterprises to encounter many challenges in system and network protection. In order to effectively control enterprise risks, the government's accounting regulations explicitly require information system-related internal controls, and computer audit is a key role for ensuring internal control. The content of this course is based on the content of various fields of the International Computer Auditor (CISA) certification. Students are expected to have a preliminary understanding of the information system audit and its risk management related concepts, and then understand the mechanisms and techniques of information security and information system auditing. Finally, it is expected as a way to help students successfully obtain the CISA certification.

Course Schedule 1. Course Introduction 2. The Process of Auditing Information Systems (1/2) 3. The Process of Auditing Information Systems (2/2) 4. Governance and Management of IT (1/2) 5. Governance and Management of IT (2/2) 6. Information Systems Acquisition, Development, and Implementation (1/2) 7. Mid Term Exam 8. Information Systems Acquisition, Development, and Implementation (2/2) 9. Information Systems Operations and Business Resilience (1/3) 10. Information Systems Operations and Business Resilience (2/3) 11. Information Systems Operations and Business Resilience (3/3) 12. Protection of Information Assets (1/3) 13. Protection of Information Assets (2/3) 14. Protection of Information Assets (2/3) 15. Final Exam

Evaluation and grading policy 1. In-class Performance: 20% 2. Homework/Quiz: 20% 3. Midterm Exam: 30% 4. Final Exam: 30%

Materials All right reserved. Do not reproduce without permission.

Foreign-language textbooks:Yes
CISA : certified information systems auditor study guide, ISBN:1119056241 Online Access(Free for NTUT): https://onlinelibrary.wiley.com/doi/book/10.1002/9781119419211

The access to curricular consultation Mail to me: vickrey@mail.ntut.edu.tw

Expanding teaching and resources ● 混成學習 (Blended Learning)
課程結合實體授課與線上學習（同步視訊／非同步活動）。
Combines face-to-face instruction with online learning (including synchronous video sessions or asynchronous activities).
● 數位教材資源應用 (Application of Digital Resources)
採用影音多媒體或具開放授權之資源（如OCW、開放教科書）作為主要或輔助教材。
Adopts multimedia or open-licensed resources (e.g., OCW, Open Textbooks) as primary or supplementary teaching materials.

The course corresponds to the SDGs SDG4：優質教育（Quality Education）

Does the course incorporate AI ● 使用生成式AI作為教學過程的輔助工具（Use generative AI tools as an aid to the teaching process）
● 鼓勵學生使用生成式AI工具（Encourage students to use generative AI tools）

Note
Use Microsoft Teams

Instructor	Yu-Chih Wei　Office Hours
Email	vickrey@mail.ntut.edu.tw
Last Updated	2026-06-05 15:30:02
Course Objective	來自於內部與外部的攻擊使企業在系統及網路保護遭遇許多挑戰，為了有效控制企業風險，政府在內部控制相關法規明確要求資訊系統相關的內部控制，而電腦稽核為確保內部控制的關鍵角色。本課程內容以國際電腦稽核師(CISA)認證的各項領域內容為主。期望學生能夠對於瞭解資訊系統稽核及其風險管理相關概念有初步的瞭解，進而瞭解資訊安全及資訊系統稽核的機制與手法，作為協助學生順利考取國際電腦稽核師(CISA)認證碁石。 Internal and external attacks have caused enterprises to encounter many challenges in system and network protection. In order to effectively control enterprise risks, the government's accounting regulations explicitly require information system-related internal controls, and computer audit is a key role for ensuring internal control. The content of this course is based on the content of various fields of the International Computer Auditor (CISA) certification. Students are expected to have a preliminary understanding of the information system audit and its risk management related concepts, and then understand the mechanisms and techniques of information security and information system auditing. Finally, it is expected as a way to help students successfully obtain the CISA certification.
Course Schedule	1. Course Introduction 2. The Process of Auditing Information Systems (1/2) 3. The Process of Auditing Information Systems (2/2) 4. Governance and Management of IT (1/2) 5. Governance and Management of IT (2/2) 6. Information Systems Acquisition, Development, and Implementation (1/2) 7. Mid Term Exam 8. Information Systems Acquisition, Development, and Implementation (2/2) 9. Information Systems Operations and Business Resilience (1/3) 10. Information Systems Operations and Business Resilience (2/3) 11. Information Systems Operations and Business Resilience (3/3) 12. Protection of Information Assets (1/3) 13. Protection of Information Assets (2/3) 14. Protection of Information Assets (2/3) 15. Final Exam
Evaluation and grading policy	1. In-class Performance: 20% 2. Homework/Quiz: 20% 3. Midterm Exam: 30% 4. Final Exam: 30%
Materials	All right reserved. Do not reproduce without permission. Foreign-language textbooks:Yes CISA : certified information systems auditor study guide, ISBN:1119056241 Online Access(Free for NTUT): https://onlinelibrary.wiley.com/doi/book/10.1002/9781119419211
The access to curricular consultation	Mail to me: vickrey@mail.ntut.edu.tw
Expanding teaching and resources	● 混成學習 (Blended Learning) 課程結合實體授課與線上學習（同步視訊／非同步活動）。 Combines face-to-face instruction with online learning (including synchronous video sessions or asynchronous activities). ● 數位教材資源應用 (Application of Digital Resources) 採用影音多媒體或具開放授權之資源（如OCW、開放教科書）作為主要或輔助教材。 Adopts multimedia or open-licensed resources (e.g., OCW, Open Textbooks) as primary or supplementary teaching materials.
The course corresponds to the SDGs	SDG4：優質教育（Quality Education）
Does the course incorporate AI	● 使用生成式AI作為教學過程的輔助工具（Use generative AI tools as an aid to the teaching process） ● 鼓勵學生使用生成式AI工具（Encourage students to use generative AI tools）
Note	Use Microsoft Teams