Volume 5, 2015 | ISACA Journal

Featured Articles

Accelerating Access Management to the Speed of Hacks

Organizations grant network access nearly every minute of every day. Hackers frequently try to get inside networks using co-opted access credentials. Yet most IT departments still review access privileges only quarterly or semiannually.

Additional languages available: 한국어

ISACA Journal Article

Addressing Cybersecurity Vulnerabilities

Author: Omar Y. Sharkasi

Addressing Cybersecurity Vulnerabilities. 10 areas of improvement to help security professionals detect, prevent and address security incidents.

ISACA Journal Article

Cyberinsurance—The Challenge of Transferring Failure in a Digital, Globalized World

Author: Jeimy J. Cano M.

As organizations enter the international context and leverage their IT operations, their visibility increases.

Additional languages available: 中文

ISACA Journal Article

Cybersecurity Detective Controls—Monitoring to Identify and Respond to Threats

Author: Fredric Greene

Detective controls are a key component of a cybersecurity program in providing visibility into malicious activity and attacks on an organization’s IT environment.

Additional languages available: 中文

ISACA Journal Article

Cybersecurity in the Quantum World

Author: Michele Mosca

Most people probably lock their doors when they are not at home. They trust that the things they value—family photographs.

Additional languages available: 한국어

ISACA Journal Article

Preparing for a Cyberattack by Extending BCM Into the C-suite

Author: Gary Lieberman

There are many steps that can be taken to avoid a cyberbreach, but statistically speaking, the odds are that every company has been or will be breached at some point.

ISACA Journal Article

The Underground Threat

Author: Larry G. Wlosinski

According to the Symantec Internet Security Threat Report (ISTR), the annual cost of cybercrime to consumers in the US is more than US $38 billion. Visit this article for more information.

Columns

ISACA Journal Article

HelpSource

Author: Ganapathi Subramaniam

How do I ensure that my organization has controls to protect itself from cyberrisk? In other words, what are the key controls that my company must implement to protect itself from cyberrisk?

ISACA Journal Article

Information Ethics: Monitoring Morality—Is Assurance of Information Ethics Feasible?

Author: Vasant Raval

My honest thought about monitoring is: I do not like being monitored! I am not alone. A large majority of individuals and organizations would assert that they do not like being monitored.

ISACA Journal Article

Information Security Matters: Stanley Baldwin’s Bomber

Author: Steven J. Ross

Stanley Baldwin was a British politician who won numerous national elections in the 1920s and 1930s.

ISACA Journal Article

IS Audit Basics: Auditors and Large Software Projects, Part 1: Can Auditors Prevent Project Failure?

Author: Ed Gelbstein

Large software projects have been notorious because of: Their large budget and timescale overruns, Failing to deliver the promised benefits and more!

ISACA Journal Article

The Network: Daniela Gschwend

Author: ISACA

What has been, or do you anticipate being, the biggest compliance challenge in 2015?

Online Exclusives

ISACA Journal Article

Book Review: Governance, Risk Management and Compliance

Author: Richard M. Steinberg

Those who peruse this book can gain a clear understanding of how the establishment of the right processes, organization and technologies can guarantee the accomplishment of corporate governance goals.

ISACA Journal Article

IS Audit Basics: Auditors and Large Software Projects, Part 2: Can Auditors Prevent Project Failure?

Author: Ed Gelbstein

This three-part series within the IS Audit Basics column continues a discussion on a matter that, over many years, has been of concern to business managers everywhere.

ISACA Journal Article

Book Review: IT Auditing and Application Controls for Small and Mid-sized Enterprises

Authors: Jason Woods, William Brown, and Harry Howe

Former US President John F. Kennedy said, “The Chinese use two brush strokes to write the word ‘crisis.’ One brush stroke stands for danger; the other for opportunity. In a crisis, be aware of the danger, but recognize the opportunity.”

ISACA Journal Article

Vulnerability of Login Credentials at the Heart of Cyberhacks and Data Breaches

Author: Jeff Maynard

Corporate entities and retailers are scrambling to shore up network security by addressing the primary vulnerability of network security: the login. Unique behavioral biometrics may be the solution.