- This topic has 4 replies, 5 voices, and was last updated 14 years, 5 months ago by .
-
Topic
-
*Edit – sorry, first time contributor. I didn’t mean to post to this section of the forum.
Don’t feel bad if you’re not getting the IT section, I can’t even pass it! I have several years of IT audit and information security experience and am a CISSP (closest equivalent to the CPA in the security world). I’m studying for BEC right now, and I have to say that, based on the Becker materials, most of the IT section is absurd, outdated, and (at times) technically incorrect. No one, especially a CPA, needs to be concerned with the minutiae it covers. It’s difficult for me to read the questions because they are so embarrassingly awful – it’s like watching Michael Scott make an idiot out of himself on The Office. Modern issues such as web security, social networking, and cloud computing are nowhere in the material, yet CPAs need to know that Linux is written mostly in C? Or that the Internet is not, in fact, a large server run by Interpol? It is the same problem as introductory “computing for business students” undergrad classes – they think they have to teach something, they just don’t know what to teach, so they spew out a bunch of definitions committed to a textbook that was written in the 80s.
My first time through the practice questions, I got 70% correct. I’ve seen a lot of client computing environments, (ethically) hacked websites, compromised thousands of user IDs, exploited firewall vulnerabilities, and sat in on IT controls implementation committees. As an IT/security professional, my advice for this section is to commit the answers to memory and then forget them as soon as you finish the exam – do not worry about learning it. Knowing this material will not aid you in speaking to the IT folks within your organizations or at your clients. It probably supports their argument that the auditors “don’t get it.” There will never be another time in your life that you need to know most of this stuff (and the stuff you need to know is pretty much common sense or common knowledge).
If you are interested in learning about relevant IT and security topics, I suggest finding blogs and following people on Twitter. Never go near a textbook.
- The topic ‘As an IT professional…’ is closed to new replies.
