All members and certification holders received a brochure outlining the ISACA^® strategy, resulting from the recent market research study undertaken. Members can access the brochure on this web site.

The research was undertaken while recognizing ISACA’s strengths and its challenges within a shifting marketplace and evolving constituency base. The study and strategy initiative were prompted by a desire to stay ahead of the curve.

As noted by International President Lynn Lawton, CISA, FBCS CITP, FCA, FIIA, “…in today’s world, events and the environment are always changing, and if the organization does not change as well, it can quickly find itself behind the times.”

The strategy was designed to address a vision and mission built on the following basic tenets:

• Users and organizations must feel trust in their information systems, and they must realize value from them. Trust and value are the outcomes of our members’ endeavors.
• ISACA has a global leadership position in knowledge, certifications, community, advocacy and education.
• ISACA focuses on certain specific professional spaces—information systems assurance and security, enterprise governance of IT, and IT-related risk and compliance.

Although the specific wording of the vision and mission may still be in draft stage, the concepts are clear. The initiatives outlined in the strategy reinforce each other and support the mission and vision, and are grouped within five major strategic themes:

1. Realize full potential of COBIT^®. COBIT is widely known and adopted, giving it a leadership position and favorable brand recognition. To build on that reputation, ISACA will create new intellectual property (IP) and incorporate existing IP under the COBIT architecture. Through an open source model, volunteers will drive development of COBIT levels 3 and 4 controls material.
2. Enhance commitment to the core constituency of IT audit and controls. To address constituents’ evolving need for pragmatic, useful information, the strategy will focus on the development of more practical, how-to, benchmark and topical information, and on input and response to major regulations affecting IT controls. More recognition through certificate programs and additional credentialing will also be explored.
3. Distinctly serve the certification needs of IT professionals. Many IT professionals have professional interests and concerns within ISACA’s areas of expertise. To address that audience, additional offerings will be investigated on the topics of using proper IT controls to identify, quantify and manage business and technology risks, and to comply with regulations impacting information systems. An enterprise certification based on COBIT will be explored as well.
4. Maximize return on marketing. The strategy identifies many opportunities for ISACA to maximize its return on marketing expenditures: an expanded member retention program, regional growth efforts, segmented messaging, and use of Web 2.0 functionality to build and enable ISACA’s community.
5. Build ISACA’s capabilities to deliver benefits to its constituents. Growth and diversity have necessitated new development and delivery mechanisms to enable the association to keep up with member needs. ISACA must rethink some of its processes, even its branding. ISACA will embrace open innovation to engage members in developing deeper content and new products, will partner more proactively with other organizations, and will seek efficiencies within its own organizational structure and governance.

Not all elements of the strategy are finalized; it will be a living “document,” granting ISACA the flexibility to respond as needed to changing circumstances.

What’s Next

The next steps will be transitioning the strategic initiatives to tactical plans and weaving those plans into the program of work already scheduled for the year. Many of the plans are beginning right away and some of the results will be available by the end of 2009. Progress will be reported regularly via the web site and print articles.

ISACA is extremely grateful to the more than 1,800 members, certification holders, chapter leaders, and key board and committee chairs who participated in the interviews and surveys that guided and informed the strategy development. That input, coupled with the many discussions of the Board of Directors, Strategic Advisory Group and ISACA staff, has resulted in a strategy that reflects the best thinking of a broad sample of members and constituents. And, the opportunities for member engagement continue.

Many individuals and groups will be involved in executing the strategy: chapters, key boards and committees, subject matter experts, and a host of others. The support of all those who have participated to date and those whose expertise will be needed in the future is gratefully acknowledged. For more information on this topic, please view the webcast by Lynn Lawton.