Featured Deliverables |
|
This update of the 2004 edition focuses on the attributes and incremental functionality in the most recent Oracle relational database management system (RDBMS) software releases 10g and 11g (with focus on 11g). The book covers other “soft” topics that an assessor needs to be familiar with, such as developing a strategy to plan the audit, understanding the IT environment, and reviewing policies and standards. It also provides readers with the approach, knowledge and tools to effectively plan and execute an Oracle database security assessment.
|
|
-
Download (Member-only, PDF, 3M)
-
Toolkit (Maturity files) (Member-only, Zip, 1.2M)

-
Toolkit (Awareness files) (Member-only, Zip, 1M)

-
Toolkit (Overview files) (Member-only, Zip, 5.3M)

-
Toolkit (Implementation files) (Member-only, Zip, 2.6M)

-
Toolkit (Implementation PPT, Val IT) (Member-only, Zip, 4.3M)

-
Purchase the Book
Implementing and Continually Improving IT Governance enhances, expands and improves on the content of the prior ISACA IT Governance Implementation Guide Using COBIT® and Val IT™, 2nd Edition publication. It incorporates valuable references to cutting edge research from the recent ISACA publications The Val IT™ Framework 2.0 and The Risk IT Framework, as well as from the recently issued ISO/IEC 38500 standard on IT governance.
This guide provides an approach for implementing IT governance in such a way that the implementation team can get started in an effective and efficient manner. The objective is to provide a good practice approach for implementing and maintaining effective IT governance based on a continual improvement life cycle that should be tailored to suit the enterprise’s specific needs. Subjects covered in the guide include:
- Positioning IT governance
- Taking the first steps towards IT governance
- Challenges and success factors
- Enabling change
- Implementing a continual improvement life cycle
- Using COBIT, Val IT and Risk IT components
The tool kit zip files for ISACA members now contain 22 supporting documents in various formats. The tool kits include an Excel Process Maturity Tool based on the COBIT maturity model and designed to provide practical support for its use, highlighting the need to address IT governance, perform a gap analysis and identify areas to mature.
|
|
|
The Risk IT Framework fills the gap between generic risk management frameworks and detailed (primarily security-related) IT risk management frameworks. It provides an end-to-end, comprehensive view of all risks related to the use of IT and a similarly thorough treatment of risk management, from the tone and culture at the top, to operational issues. In summary, the framework will enable enterprises to understand and manage all significant IT risk types, building upon the existing risk related components within the current ISACA frameworks, i.e., COBIT and Val IT.
The Risk IT Practitioner Guide
|
|
|
The Risk IT Framework describes a detailed process model for the management of IT-related risk. In this model, multiple references are made to risk analysis, scenario analysis, responsibilities, key risk indicators and many other risk-related terms. The Risk IT Practitioner Guide contains practical, detailed guidance on how to accomplish some of the key activities described in the process model.
The Risk IT Framework
|
|
|
Cloud computing is an emerging technology that may help enterprises meet the increased requirements of lower total cost of ownership (TCO), higher return on investment (ROI), increased efficiency, dynamic provisioning and utility-like pay-as-you-go services. However, many IT professionals are citing the increased risks associated with trusting information assets to the cloud as something that must be clearly understood and managed by relevant stakeholders. This page provides resources for more information on what cloud computing and aid in understanding this initiative and how it could align with a business.
Additional Information on Cloud Computing:
|
|
|