ISACA JournalIndicates Online-Exclusive Content

Volume 6, 2019 

Information security professionals who want to see privacy designed into their systems need to step up and be a part of the design process, as well as testing and validation once a system is designed. Read More

At this point with cloud computing and the Internet of Things (IoT), auditors are awakening to a new reality, much like some 25 years ago to the explosion of the Internet. Read More

Those of you who have read my bio are aware that in addition to writing for the ISACA Journal, I am also a topic leader for the Audit and Assurance community on ISACA’s Engage Online forum. Read More

Honoring Our Past. Innovating Our Future Read More

Fifty years ago, information systems had recognizable boundaries and it was easy to determine if the moats were filled with water and the bridges were pulled up to secure the castle. Not so anymore. Read More

Part 1 of this article proposed a method using ArchiMate to integrate COBIT 5 for Information Security with enterprise architecture (EA) principles, methods and models to properly implement the chief information security officer’s (CISO’s) role. Read More

The auditor can apply the crown jewel approach to determine which assets and processes are the most critical and could have the most impact to the organization to guide where to focus audit efforts. Read More

The global cybersecurity ecosystem has dramatically evolved, and keeping it safe has become a complex issue, largely because cybercriminals’ persistent attacks evolve faster than security solutions are being developed. Read More

There will be more than 64 billion Internet of Things (IoT) devices by 2025. Many of these devices lack necessary security features and could be discovered using IoT search engines. Read More

Examining several cybersecurity response programs, evaluating their levels of success and describing various common malware programs can help reveal methods to help combat cyberincidents. Read More

Data audits present strong business benefits beyond regulatory compliance to improving business operations and safeguarding data integrity. Read More

Many organizations are rapidly moving to implement robotic process automation (RPA) because it helps leverage multiple fronts, including cost advantage, workforce optimization, quality improvements, flexible and dynamic execution, speed, and agility. Read More

It is important to identify competencies needed by auditors to ready themselves for work with data analytics tools and techniques. Read More

Using AI technologies in the audit process improves, but does not replace, the audit profession. AI enhances audits by increasing efficiency, effectiveness and accuracy. Read More

The common wisdom is to not fix what is not broken. So, what exactly needs fixing in audit? How much of the need to change is real and how much is hype? Read More

On a regular basis, the board should receive reports on cybersecurity activities and the risk associated with them, metrics on IT performance, and efforts taken by management to monitor and mitigate risk. Read More

Read More

An up-to-date listing of the current IT Audit and Assurance Standards, Guidelines, and Tools and Techniques Read More