HomeResourcesInsights and ExpertisePublications
Insights and Expertise

Publications

Explore our expansive library of books. ISACA offers a wide range of topics in our library, including audit, assurance, control, information security, cybersecurity risk, governance, COBIT and more.

Featured Publication

Privacy by Design and Default: A Primer

Individual privacy is a fundamental human right and has been thought of one since 1890. Today, that privacy has been extended to the digital world. And like any other aspect of today’s increasingly technological landscape, privacy is a complex issue that requires careful navigation.

Learn More

Browse All ISACA Publications

Layout List Layout Card Layout

15 of 49 Results

IT Control Objectives for Sarbanes-Oxley, 4th Edition
Book

IT Control Objectives for Sarbanes-Oxley, 4th Edition

ISACA’s IT Control Objective for Sarbanes-Oxley, 4th Edition provides guidance on the assessment of the effectiveness of internal control over financial reporting (ICFR) in attestation of the management assessment, to comply with the Sarbanes-Oxley Act of 2002 (SOX).
Privacy by Design and Default: A Primer
Book

Privacy by Design and Default: A Primer

Individual privacy is a fundamental human right and has been thought of as one since 1890. Today, that privacy has been extended to the digital world. And like any other aspect of today’s increasingly technological landscape, privacy is a complex issue that requires careful navigation.
Implementing the General Data Protection Regulation
Book

Implementing the General Data Protection Regulation

This book offers practical advice on implementing the Regulation. It makes use of the COBIT5 Framework and related publications to maximize effectiveness and efficiency. The framework itself and its constituent parts provide a reliable and proven foundation for GDPR projects in commercial as well as not-for-profit organizations. The book further includes references to other useful sources where appropriate.
CCOA Official Review Manual
Book

CCOA Official Review Manual

The CCOA Review Manual 1st Edition is a comprehensive reference guide designed to help individuals prepare for the CCOA exam and understand cybersecurity analyst roles and responsibilities.

A Practical Guide to the Payment Card Industry Data Security Standard
Book

A Practical Guide to the Payment Card Industry Data Security Standard

This book explains the security requirements, processes and technologies that are required to implement the Payment Card Industry Data Security Standard (PCI DSS) which is a compliance requirement for all enterprises that process, store, transmit or access cardholder information for any of the major payment brands, such as American Express®, Discover®, JCB, MasterCard® and VISA® brands.
Artificial Intelligence: A Primer on Machine Learning, Deep Learning, and Neural Networks
Book

Artificial Intelligence: A Primer on Machine Learning, Deep Learning, and Neural Networks

This book is a comprehensive overview of the rapidly advancing field of artificial intelligence (AI).

IT Risk Fundamentals Study Guide
Book

IT Risk Fundamentals Study Guide

The IT Risk Fundamentals Study Guide is a comprehensive study aid that will help to prepare learners for the IT Risk Fundamentals exam.

IT Audit Fundamentals Study Guide
Book

IT Audit Fundamentals Study Guide

The IT Audit Fundamentals Study Guide is a comprehensive reference for the concepts and topics needed establish a fundamental knowledge of the role of an IT auditor.
Cybersecurity Audit Study Guide
Book

Cybersecurity Audit Study Guide

ISACA’s Cybersecurity Audit Certificate Program provides audit/assurance professionals with the knowledge needed to excel in cybersecurity audits. It provides security professionals with an understanding of the audit process, and IT risk professionals with an understanding of cyber-related risk and mitigating controls.
CDPSE Review Manual
Book

CDPSE Review Manual

The CDPSE Review Manual 3rd Edition is a comprehensive reference guide designed to help individuals prepare for the CDPSE exam and understand technical privacy implementation and privacy principles.

Artificial Intelligence Fundamentals Study Guide
Book

Artificial Intelligence Fundamentals Study Guide

This guide provides an overview of key concepts and principles of AI including insight into the basics of AI functionality, generative AI, application, risks and ethical considerations.

Applied Data Management for Privacy, Security and Digital Trust
Book

Applied Data Management for Privacy, Security and Digital Trust | Digital | English

Applied Data Management for Privacy, Security and Digital Trust provides information to enable privacy and governance professionals to position enterprise data management programs to support privacy and security programs.
COBIT Focus Area: DevOps Using COBIT 2019
Book

COBIT Focus Area: DevOps | Digital | English

Explore how you can develop and deliver software products, services and solutions more effectively and efficiently using ISACA®’s COBIT® 2019 framework.
COBIT Focus Area: Information and Technology Risk Using COBIT 2019
Book

COBIT Focus Area: Information and Technology Risk | Digital | English

COBIT Focus Area: Information & Technology Risk provides guidance related to information and technology (I&T) risk and how to apply COBIT to I&T risk practices. The publication is based on the COBIT core guidance for governance and management objectives, and it enhances the core guidance by highlighting risk-specific practices and activities as well as providing risk-specific metrics.
Spanish: ITAF Companion Performance Guidelines 2208
Book

ITAF Companion Performance Guidelines 2208 | Digital | Spanish

ISACA creó las directrices de Muestreo de Auditoría de Tecnología de la información (Directrices 2208) como complemento del marco de referencia de auditoría de tecnología de la información (ITAF™).
Load More
COBIT Focus Area: Information and Technology Risk Using COBIT 2019
Book

COBIT Focus Area: Information and Technology Risk | Print | English

COBIT Focus Area: Information & Technology Risk provides guidance related to information and technology (I&T) risk and how to apply COBIT to I&T risk practices. The publication is based on the COBIT core guidance for governance and management objectives, and it enhances the core guidance by highlighting risk-specific practices and activities as well as providing risk-specific metrics.
COBIT 2019 Design Guide Toolkit
Book

COBIT 2019 Design Guide and Toolkit | Digital | English

COBIT 2019 Design Guide and Toolkit: Designing an Information & Technology Governance Solution
WBCB
Book

Blockchain Fundamentals | Digital | English

Blockchain has the potential to become a major force for innovation and change the way you process everything with records-from registrations, records of ownership, transfers of value and stock purchases, to identities and healthcare.
WGIC
Book

Guide to China’s Regulatory Cybersecurity Implementation Framework | Digital | English

China solicited public comment on the Cybersecurity Law of the People's Republic of China (National Cybersecurity Law) beginning on 6 July 2016, and the law formally came into effect on 1 June 2017.
WITCOB
Book

IT Control Objectives for BASEL II | Digital | English

IT Control Objectives for Basel II provides a framework for managing operational and information risk in the context of Basel II. It presents an outline of risk under Basel II, the links between operational risk and IT risk, and an approach for managing information risk.

FREE to ISACA Members
Advanced Persistent Threats: How to Manage The Risk to Your Business
Book

Advanced Persistent Threats: How to Manage The Risk to Your Business

This book explains the nature of the security phenomenon known as the advanced persistent threat (APT). It also provides helpful advice on how to assess the risk of an APT to the organization and recommends practical measures that can be taken to prevent, detect and respond to such an attack.

Risk IT Practitioner Guide, 2nd Edition
Book

Risk IT Practitioner Guide, 2nd Edition

The Risk IT Practitioners Guide is designed to assist in developing, implementing or enhancing the practice of risk management by: Connecting the business context with the specific I&T assets.
Risk IT Framework, 2nd Edition
Book

Risk IT Framework, 2nd Edition

The Risk IT Framework is designed to assist in developing, implementing or enhancing the practice of risk management by: Connecting the business context with the specific I&T assets.

ISACA Privacy Principles and Program Management Guide
Book

ISACA Privacy Principles and Program Management Guide

The main purpose of ISACA Privacy Principles, Governance and Management Program Guide is to provide readers with a harmonized privacy framework. The book offers a set of privacy principles that align with the most commonly used privacy standards, frameworks and good practices, as well as fill in the gaps that exist among these different standards.
Implementing Cybersecurity Guidance for Small and Medium-Sized Enterprises
Book

Implementing Cybersecurity Guidance for Small and Medium-Sized Enterprises

Cybersecurity is a topic of interest for most enterprises, regardless of their size. Cybercrime and cyberwarfare are not restricted to large, multinational enterprises. Increasing numbers of small and medium-sized enterprises (SMEs) are being targeted. In an SME context, information security and cybersecurity are often difficult to implement in a satisfactory and cost-effective manner.
Cybersecurity Guidance for Small and Medium-Sized Enterprises
Book

Cybersecurity Guidance for Small and Medium-Sized Enterprises

Cybersecurity is rapidly becoming a critical activity in many enterprises, due to the increasing number of cyberattacks and cybercrime. Cyberattacks often target small and medium-sized enterprises, because cybercriminals expect information in SMEs to be less protected than in large enterprises.
COBIT for Small and Medium Enterprises Using COBIT 2019
Book

CB19SMEP_C

This is a focused publication that can serve IT governance functionaries in small and medium enterprises looking for detailed guidance on the applying the COBIT 2019 Model to their organizations.

Implementing the NIST Cybersecurity Framework Using COBIT 2019
Book

Implementing the NIST Cybersecurity Framework Using COBIT 2019

Many enterprises lack an approach to integrate cybersecurity standards and enterprise governance of Information & Technology (EGIT). This lack of approach leaves them unable to establish systematic—yet flexible and achievable—governance and management objectives, processes, and capability levels to make measured improvements toward cybersecurity goals.
COBIT Focus Area: Information Security
Book

COBIT Focus Area: Information Security

COBIT Focus Area: Information Security provides guidance related to information security and how to apply COBIT to specific information security topics/practices within an enterprise.

COBIT 2019 Implementation Guide
Book

COBIT 2019 Implementation Guide

In this age of digital transformation, enterprises are more dependent than ever on information and technology (I&T) assets to drive innovation, growth and sustainability.
COBIT 2019 Framework: Introduction & Methodology
Book

COBIT 2019 Framework: Introduction & Methodology

Over the years, best-practice frameworks have been developed and promoted to assist in the process of understanding, designing and implementing enterprise governance of IT (EGIT).

COBIT 2019 Framework: Governance & Management Objectives
Book

COBIT 2019 Framework: Governance & Management Objectives

COBIT is a framework for the governance and management of enterprise information and technology, aimed at the whole enterprise.

COBIT 2019 Design Guide
Book

COBIT 2019 Design Guide

For more than two decades, the COBIT governance framework for enterprise information and technology (I&T) has been helping enterprises derive more value from I&T assets. COBIT 2019, the latest iteration of this world-renowned framework, builds on this legacy.

IoT Fundamentals Study Guide
Book

IoT Fundamentals Study Guide

This guide provides an overview of key principles, concepts and aspects of IoT. Gain insight and examine the collection of sensors, actuators and computing capabilities, not only how they work together to solve problems and provide services, but takeaways also include how their characteristics and choices drive decisions, leave gaps and create security vulnerabilities.
Data Science Fundamentals Study Guide
Book

Data Science Fundamentals Study Guide

Wikipedia defines Data Science as an inter-disciplinary field that uses scientific methods, processes, algorithms and systems to extract knowledge and insights from many structural and unstructured data.
Cybersecurity Fundamentals Study Guide
Book

Cybersecurity Fundamentals Study Guide

The Cybersecurity Fundamentals Study Guide introduces learners to cybersecurity, a growing and rapidly changing field that is becoming increasingly vital to business survival, job stability, and national security.
CRISC Review Manual
Book

CRISC Review Manual

The CRISC Review Manual 8th Edition is a comprehensive reference guide designed to help individuals prepare for the CRISC exam.

Cloud Fundamentals Study Guide
Book

Cloud Fundamentals Study Guide

This guide provides an overview of key concepts and terminology of cloud computing including insight into services models, cloud governance, and an overview of critical cloud service considerations.
CISA Official Review Manual
Book

CISA Official Review Manual

The CISA Review Manual 28th Edition is a comprehensive reference guide designed to help individuals prepare for the CISA exam and understand information system auditor roles and responsibilities.
CGEIT Review Manual
Book

CGEIT Review Manual

The CGEIT Review Manual 8th Edition is designed to help individuals prepare for the CGEIT exam and understand the responsibilities of those who implement or manage governance of enterprise IT (GEIT) or have significant advisory or assurance responsibilities in regards to GEIT.

Blockchain Fundamentals Study Guide
Book

Blockchain Fundamentals Study Guide

This guide provides an overview of key blockchain principles, models and infrastructure including insight into the multitude of blockchain solutions now globally available, how they may interact or interoperate, and how they may evolve in the future.
AAISM Official Review Manual
Book

AAISM Official Review Manual

The ISACA® AAISM Official Review Manual is a comprehensive reference guide designed to help individuals prepare for the AAISM exam.

AAIR Official Review Manual
Book

AAIR Official Review Manual

The ISACA AAIR Official Review Manual is a comprehensive reference guide designed to help individuals prepare for the AAIR exam.

AAIA Official Review Manual
Book

AAIA Official Review Manual

The ISACA AAIA Official Review Manual is a comprehensive reference guide designed to help individuals prepare for the AAIA exam.

CISM Review Manual
Book

CISM Review Manual

Prepare to obtain the Certified Information Security Manager® (CISM) certification and be recognized among the world’s most-qualified information security management professionals.
Korean: ITAF™ Companion Performance Guidelines 2208
Book

ITAF™ Companion Performance Guidelines 2208 | Digital | Korean

ISACA는 정보 기술 감사 프레임워크(ITAF™)의 동반자로서 정보 기술 감사 샘플링 지침(Guideline 2208)을 재정했습니다. 이 지침의 목적은 감사 샘플을 설계 및 선택하고 샘플 결과를 평가하는 데 있어, IT 감사 및 보증 실무자에게 지침을 제공하는 것입니다. 적절한 샘플링 및 평가를 통해 충분하고 적절한 근거로서의 요건을 달성하는 데 도움이 될 것입니다.

IT 감사 및 보증 실무자는 감사 절차가 해당 모집단의 100% 미만에 적용되나 총 모집단에 대한 결론을 내릴 때 이러한 지침을 고려해야 합니다.

Japanese: ITAF Companion Performance Guidelines 2208
Book

ITAF Companion Performance Guidelines 2208 | Digital | Japanese

ISACAは、IT監査フレームワーク（ITAF™）の手引きとして、IT監査サンプリングガイドライン（ガイドライン2208）を作成しました。 これらのガイドラインの目的は、監査サンプルの設計と選択およびサンプル結果の評価において、IT監査や保証の実務者にガイダンスを提供することです。 適切なサンプリングと評価は、十分かつ適切な証拠の要件を達成することを支援します。
Chinese: ITAF Companion Performance Guidelines 2208
Book

ITAF Companion Performance Guidelines 2208 | Digital | Chinese

ISACA在创建信息技术审计框架（ITAF™）的同时也创建了《信息技术审计抽样指南（准则2208）》。 这些准则的目的在于为IT审计和鉴证从业人员提供设计和选择审计样本并评估样本结果的指南。适当的抽样和评估有助于满足充分和适当证据所需的要求。
Turkish: COBIT Focus Area: DevOps Using COBIT 2019
Book

COBIT Focus Area: DevOps | Digital | Turkish

ISACA'nın COBIT® 2019 çerçevesini kullanarak yazılım ürünlerini, hizmetlerini ve çözümlerini nasıl daha etkin ve verimli bir şekilde geliştirip sunabileceğinizi keşfedin.

Custom Training Programs

Looking to train your team? We can customize virtual training and certification programs for every need.

GET STARTED