JOnline Exclusives 

JournalOnline (JOnline) comprises online-only articles available exclusively to ISACA members in the months in which no print Journal is issued (February, April, June, August, October and December). Articles are opened to the public 1 year after their release. These articles undergo the same rigorous review process as articles in the ISACA Journal print edition.

View RSS feed

2012

JOnline: Customer Relationship Information Technology Internal Control and Security Framework
Robbie Sauerberg, Weston Smith and Jonathan Tudor, CCNA - April 2012 
JOnline: Book Review—Master Data Management and Data Governance
Alex Berson and Larry Dubov | Reviewed by Bright Munongwa - April 2012 
JOnline: Book Review—Cyber Attacks: Protecting National Infrastructure
Edward Amoroso | Reviewed by Jeimy J. Cano M., Ph.d., CFC, CFE, CMAS - February 2012 
JOnline: Book Review—Information Security and Privacy
Thomas J. Shaw Esq. | Reviewed by Horst Karin, Ph.d., CISA, CRISC, CISSP - February 2012 
JOnline: Log Management: A Pragmatic Approach to PCI DSS
Prakhar Srivastava and Tarun Verma - February 2012 

2011

JOnline: An Introduction to Information Security Incident Management Based on ISO/IEC TR 18044:2004
Haris Hamidovic, CIA, ISMS IA, ITIL-F, IT Project+ - December 2011 
JOnline: Clearing the Cloud Over PCI DSS v2.0
Pritam Bankar, CISA, CISM and Sharad Verma - December 2011 
JOnline: An Introduction to Information Security Management in Health Care Organizations
Haris Hamidovic, CIA, ISMS IA, ITIL-F, IT Project+ and Jasmina Kabil - October 2011 
JOnline: Certification—The Answer to Cybersecurity Woes?
Derek Mohammed, Ph.D., CISA, CISSP, PMP - October 2011 
JOnline: BMIS—An Introduction to the System Environment
Haris Hamidovic, CIA, ISMS IA, ITIL, IT Project+ - August 2011 
JOnline: Book Review: Fraud Auditing and Forensic Accounting, 4th Edition
Tommie W. Singleton and Aaron J. Singleton | Reviewed by Horst Karin, Ph.D., CISA, CISP, ITIL - June 2011
JOnline: Top IT Governance Issues of 2011
Larry Marks, CISA, CGEIT, CRISC, CFE, CISSP, PMP - June 2011
JOnline: El Debido Cuidado en Seguridad de la Información
Jeimy J. Cano M., Ph.D., CFC, CFE, CMAS - April 2011
JOnline: Mapping PCI DSS v2.0 With COBIT 4.1
Pritam Bankar, CISA, CISM and Sharad Verma - April 2011
JOnline: The Prevalence of Information Security Controls: Perspectives From IT Auditors
Hui Lin, Ph.D., Meghann Abell Cefaratti, Ph.D. and Linda Wallace, Ph.D. - April 2011
JOnline: Auditing Biometrics-based Authentication Systems
Buck Kulkarni, CISA, CGEIT, PgMP - February 2011
JOnline: Risk Management When Implementing ERP Systems
Jeffrey T. Hare, CISA, CPA, CIA - February 2011
JOnline: The Relevance of IT in Criminal Investigations
Haris Hamidovic, CIA, ISMS IA - February 2011

2010

JOnline: Computer Security, Privacy, and Politics: Current Issues, Challenges, and Solutions
Edited by Ramesh Subramanian, Ph.D. | Reviewed by Carlos Villamizar Rodriguez, CISA, CGEIT, BS 25999 LA, ISO 27001 LA - December 2010
JOnline: Emergency Access Controls in SAP Environments
Jose Espin, CISA, CISSP, MCP, SAP Certified Security Consultant - December 2010
JOnline: Information Security Automation: The Second Wave
David Ramirez, CISA, CISM, BS 7799 LA, CISSP, MCSE, QSA - December 2010
JOnline: Health Care Reform Legislation Survival Guide, Part 2
Christopher P. Buse, CISA, CISSP, CPA, Larry Marks, CISA, CGEIT, CFE, CISSP, PMP and Steve Sizemore, CISA, CGAP, CIA - October 2010
JOnline: Privacy and Security Considerations for EHR Incentives and Meaningful Use
Stephen Gantz, CGEIT, CEH, CIPP/G, CISSP-ISSAP - October 2010
JOnline: Auditing Electronic Auction Systems
Ladislav Beranek, Ph.D., CISA - August 2010
JOnline: Security of Industrial Control Systems
Erwin van der Zwan, CISA, CISM, CISSP - August 2010
JOnline: Making Sure You Really Are Walking on Cloud Nine
Tarak Modi, CISA, CISSP, PMP - June 2010
JOnline: IT Outsourcing Part 1: Contracting the Partner—A Management Guide
Gerard Wijers and Denis Verhof | Reviewed by Gail Michaelson, CISA, PMP, SSGB - June 2010
JOnline: Tackling Cybercrime: Divide and Conquer
Henk-Jan van der Molen - June 2010
JOnline: Realizing Benefits of IT Investments: Overcoming the Silver-bullet View
Mohan Kancharla and Sankalan Bhattacharjee - April 2010
JOnline: Realizing Trustworthy Business Services Through a New GRC Approach
Yudistira Asnar, Ph.D., Hoon Wei Lim, Ph.D., Fabio Massacci, Ph.D. and Claire Worledge - April 2010
JOnline: The Failure of Risk Management: Why It’s Broken and How to Fix It
Douglas W. Hubbard | Reviewed by Gail Michaelson, CISA, PMP, SSGB - April 2010
JOnline: Continuous Auditing Reexamined
Norman Marks - February 2010
JOnline: Gobierno de las TIC ISO/IEC 38500
Manuel Ballester, Ph.D., CISA, CISM, CGEIT , IEEE - February 2010
JOnline: Information Technology Compliance: Past, Present and Future
Bryan C. Kissinger, Ph.D., CISA, CISSP - February 2010
JOnline: Using COBIT 4.1 to Achieve Business-IT Alignment: A Practical Approach
Juan Ignacio Rouyet, Willem Joep Spauwen and Luis Joyanes Aguilar - February 2010
JOnline: Soft IT Governance
Kazuhiro Uehara, CGEIT, CISA, CIA, PMP, and Sayaka Akino, CISA - February 2010

2009

JOnline: Application Security Controls: An Audit Perspective
Alagammai Adaikkappan, CISA, CISM - December 2009
JOnline: Healthcare Fraud: Auditing and Detection Guide
Reviewed by Vishnu Kanhere, Ph.D., CISA, CISM, AICWA, CFE, FCA - December 2009
JOnline: Managing Sarbanes-Oxley Section 404 Compliance in ERP Systems Using Information Security Control Reports
Abhik Chaudhuri, MCA, PMP, Dipanwita Chaudhuri, ACA (ICAI), MIIA and Robert E. Davis, CISA, CICA - December 2009
JOnline: Beyond Compliance—10 Practical Actions on Regulation, Risk and IT Management
Ralf T. Grunendahl and Peter H. L. Will | Reviewed by Vishnu Kanhere, Ph.D., CISA, CISM, AICWA, CFE, FCA - October 2009
JOnline: Compliance Management: A Holistic Approach
Amelia Ho, CISA, CISM, CISP, PMP, CIA, CA, CFSA, CCSA, CEH, BCCE, ISO 27001 LA - October 2009
JOnline: Information Security Program: Establishing It the Right Way for Continued Success
Sekar Sethuraman, CISA, CISM, CGEIT, CIA, CISP, PMP, CSQA, CVA and Alagammai Adaikkappan, CISA, CISM, ACA, LCS - October 2009
JOnline: Using Information Technologies to Restore Investor Trust
Antonio Wong, Ph.D., CFA and Pak-Lok Poon, Ph.D., CISA, CSQA, MACM, MIEEE - October 2009
JOnline: Fraud or Error
Fidel Santiago, CISA - August 2009
JOnline: Small Business IT Governance Implementation
Janeane Leyer and Katelyn Quigley - August 2009
JOnline: How to Achieve 27001 Certification: An Example of Applied Compliance Management
Sigurjon Thor Arvason and Keith D. Willett | Reviewed by Vishnu Kanhere, Ph.D., CISA, CISM, AICWA, CFE, FCA - June 2009
JOnline: A Study on Canadian IT Security Practices
Rafael Etges, Walid Hejazi and Alan Lefort - April 2009
JOnline: Auditing Enterprise Resource Planning Systems
Sean M. Price, CISA, CISSP - April 2009
JOnline: Insider Computer Fraud: An In-depth Framework for Detecting and Defending Against Insider Attacks
Kenneth C. Brancik | Reviewed by Vishnu Kanhere, Ph.D., CISA, CISM, AICWA, CFE, FCA - April 2009
JOnline: Evaluating and Selecting Sarbanes-Oxley Software
Roberta Ann Barra, Ph.D., CPA, Arline Savage, Ph.D., CA , and Mark G. Simkin, Ph.D. - February 2009
JOnline: How to Write a Security Policy
Paul R. Meynen - February 2009
JOnline: Overcharges in the Hydrocarbon Industry
Rabindranath Lackhan, CISA, CIA, CFE, LLB - February 2009

2008

JOnline: Board Portals: Are They Secure?
Arvind Godbole, CISA, CA, and Vasant Raval, CISA - December 2008
JOnline: Computer Ethics: A Potent Weapon for Information Security Management
Wanbil W. Lee, D.B.A., FBCS, FIMA, FHKIE, and Keith C.C. Chan, Ph.D. - December 2008
JOnline: Operational Risks Measurement
Jan Mikulecky, CISM - October 2008
JOnline: Selecting Projects for a SAS 70 Type II Assessment
Jose K. Samuel, CISA, CISSP, GCIH - October 2008
JOnline: Evaluating Privacy Controls
Sean M. Price, CISA, CISSP - August 2008
JOnline: Information Systems Audit Legislation Passed in Korea
Ilkwon Cho, Changmin Lee, Daul Shin, Jaque Rim, Sojung Kim, Hyunmok Oh and Kyeonghee Oh - August 2008
JOnline: What E-commerce Audit Planners Should Remember: The Top 10 Global CSFs for B2B Audit
Jagdish Pathak, Ph.D., Abdulkadir A. Hussein, Ph.D., and S. Ejaz Ahmad, Ph.D. - August 2008
JOnline: The Art of Database Monitoring
Sushila Nair, CISA, CISSP, BS 7799 LA - June 2008
JOnline: Billing Audit on a Mobile Operator—Call Detail Record
Dale Johnstone and Ellis Chung Yee Wong, CISA, CFE, CISSP - June 2008
JOnline: Role Engineering: The Cornerstone of RBAC
Srinivasan Vanamali, CISA, CISSP - June 2008
JOnline: E-business: Trust Inhibitors
Ramanan R. Ramanathan, Ph.D., CISSP - April 2008
JOnline: Lessons From a Fraud Case in Turkey
Mustafa Ayaz, CISA - April 2008
JOnline: SAS 70 Reports—What Do They Really Tell You?
Silka Gonzalez, CISA, CISM, CISSP, CITP, CPA - April 2008
JOnline: IS Auditing Standards in Malaysia
Jasber Kaur, Yap May Lin and Ainon Zarina Mohamed Nadzri - February 2008

2007

JOnline: Executive and Board Roles in Information Security
Paul Williams, FCA, MBCS - December 2007
JOnline: Privacy PKI: Improved Security System for Public Administration
Blint Molnár, Ph.D., and Andrea Kõ, Ph.D. - December 2007
JOnline: Monitoring Processes and Internal Control Adequacy: Continuous Monitoring Within a Microsoft Access Database
Matthew Brewster, Graham Gal, Ph.D., Seth Rosen and Andrey Zubenko - December 2007
JOnline: Turning a Security Compliance Program Into a Competitive Business Advantage
Sekar Sethuraman, CISA, CISM, CIA, CISSP, PGDM (IIMC), CSQA, BS 7799 LA, ISO 20000 Auditor - October 2007
JOnline: Who Audits the IT Auditor: Monitoring IT Audit Tasks
Omar Y. Sharkasi, CRP, CFE, CBCP - October 2007
JOnline: Federation of E-government: A Model and Framework
Abdelbaset Rabaiah and Eddy Vandijck - August 2007
JOnline: Auditing CMMI Maturity and Sarbanes-Oxley Compliance
Laurent Janssens, CISA, and Peter Leeson - June 2007
JOnline: Change Management in Process Change
Ezekiel Oseni, CISA, ACA, ACIP, ACS - February 2007
JOnline: Clause 49: An Opportunity for Indian-listed Corporations to Achieve IT Governance
Sree Krishna Rao, CISA, CA, CISSP, CEH, CCNA - February 2007
JOnline: Controlling Spreadsheets
Raymond R. Panko, Ph.D. - February 2007

2006

JOnline: A Framework for Conducting IT Due Diligence in Mergers and Acquisitions
Barrett Sundberg, Zheng-Da Tan, Trey Baublits, Hae-Joon Lee, Grant Stanis and Huseyin Tanriverdi - December 2006
JOnline: Understanding Data Classification Based on Business and Security Requirements
Rafael Etges, CISA, CISSP, and Karen McNeil - October 2006
JOnline: Concept Mapping—A Learning Tool for the Information Systems Audit Profession
Kristine M. Protzman and Vasant Raval, CISA, DBA - June 2006
JOnline: Information Assurance—Online Lottery Systems
Huzeifa Unwala, CISA, FCA - June 2006
JOnline: Virtualization Usage, Risks and Audit Tools
Michael Hoesing, CISA, CISSP, CCP, CIA, CPA, CMA - June 2006
JOnline: Strengthening Access Control: Using Smart Cards
Tara Kissoon, CISA, CISSP - April 2006
JOnline: Network Intrusion Detection: Know What You Do (Not) Need
Tarlok Birdi, CCNP, CCSE, CISSP, and Kees Jansen, CISA, CISSP, PMP - February 2006
JOnline: The SAP Landscape That Warrants Audit
Yusuf Musaji, CISM, CISA, CISSP, CGA - February 2006

2005

JOnline: On a Mission to Merge
Ray O’Hara, CPP; Tim Williams, CPP; and Karl Perman - December 2005
JOnline: An Approach to Vulnerability Management
Umesh Chavan, CISSP - October 2005
JOnline: Security Information Management: Not Just the Next Big Thing
Nicole Pauls, CISSP-ISSAP, ISSMP - October 2005
JOnline: ERP Postimplementation Problems
Yusuf Musaji, CISA, CISM, CISSP, CGA - August 2005
JOnline: How the New Standards and Regulations Affect an Auditor's Assessment of Compliance With Internal Controls
M. Virginia Cerullo, Ph.D., CPA, CIA, CFE, and Michael J. Cerullo, Ph.D., CPA, CITP, CFE - August 2005
JOnline: IT Governance: Pass or Fail?
Ken Doughty, CISA, CBCP, and Frank Grieco, CISA - April 2005
JOnline: Potential Control Processes for Sarbanes-Oxley Compliance
Charles W. Butler, Ph.D., and Gary L. Richardson, Ph.D. - April 2005
JOnline: Enterprise Instant Messaging: Taking Control
Christophe Hug-Heuveneers, CISSP - February 2005
JOnline: Fingerprint Identification: An Aid to the Authentication Process
Rodger Jamieson, Ph.D., CA, Greg Stephens and Santhosh Kumar - February 2005
JOnline: Strategies and Influence for Information Security
George Wang, CISA, CISM, CISSP - February 2005