Find Resources & Connect with members on topics that interest you.

Applications

Audit

Business Processes

Career Management

Cloud Computing/Virtualization

COBIT

Controls and Monitoring

Country

Databases

Fraud and Computer Crime

Governance and Management

Industry

Information Security

IT Service Management

Mobile/Wireless

Operating Systems

Privacy/Data Protection

Regulations

Risk

Standards

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

ME - Monitor and Evaluate

Application Controls

Process Controls

Please sign in to see your topics.

You must be logged in to join this group.

ME3.1 - Identification of External Legal, Regulatory and Contractual Compliance Requirements

This topic is intended to enable collaboration and sharing of information to facilitate a better understanding and approach to implementing this COBIT control objective based on the risk, value and guidance provided by its corresponding control practices.

COBIT Control Objective ME3.1 - Identification of External Legal, Regulatory and Contractual Compliance Requirements is contained within Process Popup Ensure Compliance With External Requirements.

Learn more about COBIT and related publications.

Click “Join This Community” to be able to actively participate in discussions and contribute content. You must be an ISACA member to join this topic. Join ISACA now.

 
This Topic Has:
7 Members
0 Online
2574 Visits

 Recent Discussions

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Identification of External Legal, Regulatory and Contractual Compliance Requirements

Identify, on a continuous basis, local and international laws, regulations, and other external requirements that must be complied with for incorporation into the organisation’s IT policies, standards, procedures and methodologies.

View value and Risk Drivers  help

Hide value and Risk Drivers help


Value Drivers

  • Identification of good practices for dealing with laws and regulations
  • Improved personnel awareness for regulatory requirements
  • Increasing process performance and compliance with laws and regulations
  • Improved corporate performance
   Risk Drivers
  • Relevant laws or regulations overlooked, leading to non-compliance
  • Potential areas of financial losses and penalties not identified
  • Decreased customer and business partner satisfaction
  • Increased likelihood of disputes with customers and regulators
  • Increased risk to business continuity from sanctions imposed by regulators
  • Poor corporate operational and financial performance

View Control Practices  help

Hide Control Practices  help

  1. Assign responsibility for the identification of legal or regulatory requirements relevant to the IT resources and operations of the organisation. Consider contractual requirements between trading partners and with service providers with respect to security, privacy, data handling, intellectual property and copyright, and insurance contracts.
  2. Design and implement a process to identify and assess the applicable laws and regulatory requirements. Determine their impact on the IT resources and operations of the organisation and its service providers, and update policies, standards, procedures and methodologies accordingly. Consider laws and regulations for electronic commerce, data flow, security, privacy, internal controls, financial reporting, industry-specific regulations, intellectual property copyright, and health and safety, and ensure that these obligations are included in the contractual terms.
  3. Assess the impact of legal and regulatory requirements on contracts related to IT operations, contractual relationships, third-party service providers and trading partners.
  4. Obtain independent counsel, where appropriate, on changes to applicable laws, regulations and standards.
  5. Maintain an up-to-date log of all relevant legal, regulatory and contractual compliance requirements; their impact; and required actions.

Discussions: 0 total

Must be a Topic member to contribute

No Results Found

Documents & Publications: 447 total

Must be a Topic member to contribute
View All »
COBIT 5 Framework Preview
This document provides a preview of the information contained in COBIT 5.
Posted by ISACA 88 days ago
Introduction to COBIT 5
This presentation by Robert Stroud, CGEIT, CRISC, ISACA Strategic Advisory Board, addresses the COBIT 5 framework, the critical aspects of COBIT 5, and what is available.
Posted by ISACA 88 days ago
COBIT 5 Implementation Introduction
Posted by ISACA 196 days ago
COBIT 5 Enabling Processes Introduction
Posted by ISACA 196 days ago
Downloads
Risk IT Framework
Posted by ISACA 216 days ago
COBIT 5 for Information Security Introduction
Posted by ISACA 255 days ago
View All »

Events & Online Learning: 11 total

View All »
24 Sep 2012
ISACA International Event
Taking the Next Step-Advancing your IT Auditing Skills-Chicago
Chicago, IL, USA
More »
Add to my Outlook
27 Sep 2012
Online
Webinar: Tuning Your PCI Program for Maximum Performance
Online
More »
Add to my Outlook
29 Oct 2012
ISACA International Event
Information Security Essentials for IT Auditors-New York CIty
New York, NY, USA
More »
Add to my Outlook
28 Mar 2013
Online
Webinar: Digital Forensics & E-Discovery: A Primer for Information Security and Audit Professionals
online
More »
Add to my Outlook
6 May 2013
ISACA International Event
Cloud Computing: Seeing through the Clouds - What the IT Auditor Needs to Know-Washington, DC
Washington, DC, US
More »
Add to my Outlook
10 Jun 2013
ISACA International Event
INSIGHTS 2013: ISACA's World Congress
Berlin, Germany
Early bird deadline has been extended: save over US $350 when you register by 1 May. Learn from industry-leading IT experts at Insights 2013. This is a unique opportunity to discover revolutionary new ideas at the world’s premier business event.
More »
Add to my Outlook
Register Now
View All »

Journal Articles: 500 total

View All »
Volume 3, 2013
Information Controls and Monitoring Framework for Health Care Organizations
by Santhosh Patil
Health care spending is a key component of any industrialized nation’s economy.
Volume 3, 2013
Migrating From COBIT 4.1 to COBIT 5—Upgrading the Turkish Banking System
by Kaya Kazmirci, CISA, CISM, CISSP
The Turkish Banking Association recently commented on the COBIT 4.1 migration to COBIT 5 and its relevant impact on banking operations.
Volume 3, 2013
The Arrival (Finally) of PCI Cloud Guidance
by Andrew Hay
The PCI Security Standards Council’s Special Interest Group for Cloud released its much-anticipated guidance for securing Software, Platform and Infrastructure as a Service (SaaS, PaaS and IaaS) cloud servers.
Volume 3, 2013
Five Questions With...
by Walter Smiechewicz, CPA
Walter Smiechewicz is a managing director in PricewaterhouseCoopers (PwC)’s Los Angeles, California, USA, office.
Volume 3, 2013
Book Review: Official Certified Ethical Hacker Review Guide, Version 7.1
by Steven DeFino and Larry Greenblatt | Reviewed by Dauda Sule, CISA
This Guide is targeted toward individuals who wish to attain the Certified Ethical Hacker (CEH) certification.
Volume 3, 2013
Why Do Corporate Frauds Occur?
by Vasant Raval, CISA, DBA
Cheating, of course, is a type of indiscretion and suggests the degradation of moral fabric as much as other indiscretions such as financial fraud.
View All »

User Contributed External Links: 0 total

Wikis: 2 total

Blog Posts: 183 total

View All »
22 Apr 2013
Payments to invalid recepients resulting in fraud
A recent publication in a local newspaper, indicated that an employee was charged with fraud with regards to claims of insurance payments that were lodged with the company were paid out to people who were not entitled to receive such payments. What po...
Posted By : Paulina.PNI | 1 comments
16 Apr 2013
აბა სტანდარტები! :-) DRAFT
მოგესალმებით და ამ პოსტში შევეცდები სტანდარტებზე გესაუბროთ. სტანდარტები... მაშ ასე, ინფორმაციული უსაფრთხოების სტანდარტებზე სანამ გადავალთ, გლობალურად არის 2-3 სტანდარტების ტერიტორიები.
Posted By : David190 | 0 comments
3 Apr 2013
IT Assurance Redefined
If you asked 100 IT professional to define "IT Assurance", I can guarantee you that you will get 100 different definitions. This seems strange for area that, by now, should be well established but what are the reasons not having unified common view about ...
Posted By : ahmedlaz | 0 comments
29 Mar 2013
IBM 2013 Global Reputational Risk and IT Study
Check out the video interview with Jack Danahy on the 2013 Global Reputational Risk and IT Study and please leaving your ratings and feedback on the video landing page. https://ibm.biz/Bdxb3k
Posted By : Calvin Powers | 0 comments
18 Mar 2013
VENEZUELA, Cursos de Preparación Examenes CISA, CISM, CRISC, COBIT
Grupos de Estudio para Acreditaciones de JUNIO, SEPTIEMBRE Y DICIEMBRE 2013. Para los que esten interesados en la presentación del exámen de certificación CISA y CISM  o para cualquiera que desee comenzar a prepararse para estas o las próximas pruebas, pu...
Posted By : Alexander Osorio | 0 comments
13 Mar 2013
Remote Power management of machines in corporate network
DISCLAIMER :- Below information is just for knowledge sharing purpose and reference. Personally or on behalf of any organization; I do not recommend any specific / particular tool listed below. These are the ones which I have come across. there may be t...
Posted By : prathameshkarekar | 0 comments
View All »
Report An Issue