Find Resources & Connect with members on topics that interest you.

Applications

Audit

Business Processes

Career Management

Cloud Computing/Virtualization

COBIT

Controls and Monitoring

Country

Databases

Fraud and Computer Crime

Governance and Management

Industry

Information Security

IT Service Management

Mobile/Wireless

Operating Systems

Privacy/Data Protection

Regulations

Risk

Standards

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

ME - Monitor and Evaluate

Application Controls

Process Controls

Please sign in to see your topics.

You must be logged in to join this group.

ME3.2 - Optimisation of Response to External Requirements

This topic is intended to enable collaboration and sharing of information to facilitate a better understanding and approach to implementing this COBIT control objective based on the risk, value and guidance provided by its corresponding control practices.

COBIT Control Objective ME3.2 - Optimisation of Response to External Requirements is contained within Process Popup Ensure Compliance With External Requirements.

Learn more about COBIT and related publications.

Click “Join This Community” to be able to actively participate in discussions and contribute content. You must be an ISACA member to join this topic. Join ISACA now.

 
This Topic Has:
4 Members
0 Online
2723 Visits

 Recent Discussions

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Optimisation of Response to External Requirements

Review and adjust IT policies, standards, procedures and methodologies to ensure that legal, regulatory and contractual requirements are addressed and communicated.

View value and Risk Drivers  help

Hide value and Risk Drivers help


Value Drivers

  • Support of the enterprise’s compliance with applicable laws and regulations through the use of standards and methodologies
  • Policies regularly reviewed and aligned with the organisation’s objectives
  • Improved personnel awareness of legal and regulatory compliance requirements
  • Increasing process performance in relation to compliance with laws and regulations
   Risk Drivers
  • Non-compliance areas not identified
  • Outdated compliance requirements remaining in effect
  • Policies failing to meet the enterprise’s compliance needs
  • Personnel unaware of procedures and practices to comply with legal and regulatory requirements

View Control Practices  help

Hide Control Practices  help

  1. Review and revise, as necessary, the policies, standards, procedures and methodologies to ensure compliance with legal and regulatory requirements.
  2. Regularly review policies, standards, procedures and methodologies for their effectiveness in ensuring necessary compliance using internal and external experts.
  3. Obtain expert independent advice, where appropriate, on policies, standards, procedures and methodologies content and implementation.
  4. Communicate new and changed requirements to all relevant personnel.

Discussions: 0 total

Must be a Topic member to contribute

No Results Found

Documents & Publications: 452 total

Must be a Topic member to contribute
View All »
COBIT 5 Framework Preview
This document provides a preview of the information contained in COBIT 5.
Posted by ISACA 93 days ago
Introduction to COBIT 5
This presentation by Robert Stroud, CGEIT, CRISC, ISACA Strategic Advisory Board, addresses the COBIT 5 framework, the critical aspects of COBIT 5, and what is available.
Posted by ISACA 93 days ago
COBIT 5 Implementation Introduction
Posted by ISACA 201 days ago
COBIT 5 Enabling Processes Introduction
Posted by ISACA 201 days ago
Downloads
Risk IT Framework
Posted by ISACA 222 days ago
COBIT 5 for Information Security Introduction
Posted by ISACA 260 days ago
View All »

Events & Online Learning: 11 total

View All »
24 Sep 2012
ISACA International Event
Taking the Next Step-Advancing your IT Auditing Skills-Chicago
Chicago, IL, USA
More »
Add to my Outlook
27 Sep 2012
Online
Webinar: Tuning Your PCI Program for Maximum Performance
Online
More »
Add to my Outlook
29 Oct 2012
ISACA International Event
Information Security Essentials for IT Auditors-New York CIty
New York, NY, USA
More »
Add to my Outlook
28 Mar 2013
Online
Webinar: Digital Forensics & E-Discovery: A Primer for Information Security and Audit Professionals
online
More »
Add to my Outlook
6 May 2013
ISACA International Event
Cloud Computing: Seeing through the Clouds - What the IT Auditor Needs to Know-Washington, DC
Washington, DC, US
More »
Add to my Outlook
10 Jun 2013
ISACA International Event
INSIGHTS 2013: ISACA's World Congress
Berlin, Germany
Early bird deadline has been extended: save over US $350 when you register by 1 May. Learn from industry-leading IT experts at Insights 2013. This is a unique opportunity to discover revolutionary new ideas at the world’s premier business event.
More »
Add to my Outlook
Register Now
View All »

Journal Articles: 500 total

View All »
Volume 3, 2013
Information Controls and Monitoring Framework for Health Care Organizations
by Santhosh Patil
Health care spending is a key component of any industrialized nation’s economy.
Volume 3, 2013
Migrating From COBIT 4.1 to COBIT 5—Upgrading the Turkish Banking System
by Kaya Kazmirci, CISA, CISM, CISSP
The Turkish Banking Association recently commented on the COBIT 4.1 migration to COBIT 5 and its relevant impact on banking operations.
Volume 3, 2013
The Arrival (Finally) of PCI Cloud Guidance
by Andrew Hay
The PCI Security Standards Council’s Special Interest Group for Cloud released its much-anticipated guidance for securing Software, Platform and Infrastructure as a Service (SaaS, PaaS and IaaS) cloud servers.
Volume 3, 2013
Five Questions With...
by Walter Smiechewicz, CPA
Walter Smiechewicz is a managing director in PricewaterhouseCoopers (PwC)’s Los Angeles, California, USA, office.
Volume 3, 2013
Book Review: Official Certified Ethical Hacker Review Guide, Version 7.1
by Steven DeFino and Larry Greenblatt | Reviewed by Dauda Sule, CISA
This Guide is targeted toward individuals who wish to attain the Certified Ethical Hacker (CEH) certification.
Volume 3, 2013
Why Do Corporate Frauds Occur?
by Vasant Raval, CISA, DBA
Cheating, of course, is a type of indiscretion and suggests the degradation of moral fabric as much as other indiscretions such as financial fraud.
View All »

User Contributed External Links: 0 total

Wikis: 2 total

Blog Posts: 183 total

View All »
22 Apr 2013
Payments to invalid recepients resulting in fraud
A recent publication in a local newspaper, indicated that an employee was charged with fraud with regards to claims of insurance payments that were lodged with the company were paid out to people who were not entitled to receive such payments. What po...
Posted By : Paulina.PNI | 1 comments
16 Apr 2013
აბა სტანდარტები! :-) DRAFT
მოგესალმებით და ამ პოსტში შევეცდები სტანდარტებზე გესაუბროთ. სტანდარტები... მაშ ასე, ინფორმაციული უსაფრთხოების სტანდარტებზე სანამ გადავალთ, გლობალურად არის 2-3 სტანდარტების ტერიტორიები.
Posted By : David190 | 0 comments
3 Apr 2013
IT Assurance Redefined
If you asked 100 IT professional to define "IT Assurance", I can guarantee you that you will get 100 different definitions. This seems strange for area that, by now, should be well established but what are the reasons not having unified common view about ...
Posted By : ahmedlaz | 0 comments
29 Mar 2013
IBM 2013 Global Reputational Risk and IT Study
Check out the video interview with Jack Danahy on the 2013 Global Reputational Risk and IT Study and please leaving your ratings and feedback on the video landing page. https://ibm.biz/Bdxb3k
Posted By : Calvin Powers | 0 comments
18 Mar 2013
VENEZUELA, Cursos de Preparación Examenes CISA, CISM, CRISC, COBIT
Grupos de Estudio para Acreditaciones de JUNIO, SEPTIEMBRE Y DICIEMBRE 2013. Para los que esten interesados en la presentación del exámen de certificación CISA y CISM  o para cualquiera que desee comenzar a prepararse para estas o las próximas pruebas, pu...
Posted By : Alexander Osorio | 0 comments
13 Mar 2013
Remote Power management of machines in corporate network
DISCLAIMER :- Below information is just for knowledge sharing purpose and reference. Personally or on behalf of any organization; I do not recommend any specific / particular tool listed below. These are the ones which I have come across. there may be t...
Posted By : prathameshkarekar | 0 comments
View All »
Report An Issue