Audit of Information Systems, are there manuals or standards?

Question

Information Security

Good afternoon, please tell me, is there any guide to IP Auditing?

Answer 1

There is NIST 800-115 , but it is closer to the gray box principle.
There is NIST 800-30 , but it has more than I think you need in terms of risk scoring and prioritization. The SANS checklist for ISO 17799
will probably be the most convenient for you . It is difficult to advise something specific without knowing the final goals of your process.