Audit/assurance Programs
In 2012, eight current audit/assurance programs are scheduled to be updated and two new programs are scheduled be issued. The final new program in the series is still to be determined.
- Cloud Computing Management, Aug. 2010
- Cybercrime: Incident Response and Digital Forensics (Sept. 2006) with Security Incident Management (Jan. 2009)
- Identity Management (Jan. 2009)
- Mobile Computing (Oct. 2010)
- Outsourced IT Environments (Jan. 2009)
- Social Media (Feb. 2011)
- Software Assurance (Sept. 2001)
- System Development and Project Mgmt. (Jan. 2009)
- Privacy (New)
Cloud Vision White Paper Series
- Cloud Computing ROI—Provides practical and pragmatic guidance, supported by specific metrics and KPIs that can be applied to the analysis of a cloud project, and what these measurements mean to organizations and the underlying projects, allowing organizations to provide a more structured analysis to projects considering a cloud component. It is scheduled to be available in the second quarter of 2012.
- Governance in the Cloud—This a high-level overview of risks and benefits of using a cloud.and It is scheduled to be available in second quarter of 2012.
- Security in the Cloud—This research publication will include an accompanying risk assessment toolkit, and is scheduled to be available in the third quarter of 2012.
- Vendor Management in the Cloud— This research publication will include an accompanying service level agreement toolkit and is scheduled to be available in the fourth quarter of 2012.
COBIT Assessment Programme
The current COBIT assessment programme publications use COBIT 4.1. Work is in progress to create the following publications for issue in August 2012:
- COBIT Process Assessment Model: Using COBIT 5
- COBIT Assessor Guide: Using COBIT 5 and Tool Kit
- COBIT Self-assessment Guide: Using COBIT 5 and Tool Kit
COBIT 5 for Information Security
This is the first in a planned series of professional guides for COBIT 5, and is designed to provide a security perspective to the COBIT 5 framework. This professional guide is scheduled to be issued in June 2012.
Securing Mobile Devices Using COBIT 5
This book will examine security risk associated with mobile devices and BYOD and will provide solutions to effectively reduce enterprise risk while enabling business through mobility. It is scheduled to be issued in the fourth quarter of 2012.
SOC2: A User Guide
This joint project with the AICPA provides user guidance on the recently released SOC2 publication. The book is scheduled to be issued in July 2012.