Volume 1, 2016 | ISACA Journal

Featured Articles

Actionable Security Intelligence From Big, Midsize and Small Data

Actionable Security Intelligence From Big, Midsize and Small Data. Examines synergies among big, midsize & small data and provide chance to overtake the attackers.

ISACA Journal

Auditing Cybersecurity

Author: Martin Coe

Auditing Cybersecurity. An approach to assess the adequacy of a firm’s cybersecurity posture. Taking the cyber vulnerability assessment approach.

ISACA Journal Article

Comparison of PCI DSS and ISO/IEC 27001 Standards

Author: Tolga Mataracioglu

This article discusses the interoperability of PCI DSS 3.1 and ISO/IEC 27001:2013. The pros and cons of the PCI DSS and ISO/IEC 27001 standards are compared.

Additional languages available: 中文

ISACA Journal Article

How COBIT 5 Improves the Work Process Capability of Auditors, Assurance Professionals and Assessors

Author: Graciela Braga

How COBIT 5 Improves the Work Process Capability of Auditors, Assurance Professionals and Assessors with common tasks & activities to complete.

Additional languages available: Español

ISACA Journal Article

How to Be the Most Wanted IS Auditor

Author: Sanjiv Agarwala

The audit profession is known to businesses of all kinds, especially those that are governed by regulation.

ISACA Journal Article

Managing Data Protection and Cybersecurity—Audit’s Role

Author: Mohammed J. Khan

Data protection and cybersecurity go hand-in-hand due to the nature of the risk involved. The underlying assumption is that all data.

Additional languages available: 中文

ISACA Journal Article

Seven Software-related Incidents and How to Avoid or Remediate Them

Author: Frederick G. Mackaden

Verizon’s 2015 Data Breach Investigations Report, which addresses industry verticals such as education & entertainment, points to key incidents related to data breaches to watch for.

ISACA Journal Article

The Art of Data Visualization: A Gift or a Skill?, Part 1

Author: Karina Korpela

The ability to create eye-catching visuals is not an inherited skill. The skills required for most effectively displaying information are not intuitive.

ISACA Journal Article

Transforming the IT Audit Function—Taking the Digital Journey

Author: Robert (Bob) E. Kress

Today’s digital revolution is disrupting every corner of the business world and every function across the business enterprise.

Additional languages available: Español

Columns

ISACA Journal Article

Guest Editorial: Why Everyone Dislikes the IT Auditor and How to Change It

Author: Tommie W. Singleton

Well, to be truthful, not everyone dislikes the IT auditor. But there have been a lot of remarks made over the years.

ISACA Journal Article

Information Security Matters: Cyber/Privacy

Author: Steven J. Ross

There is a lot to be learned by considering certain cyberattacks as privacy violations. GAPP offers some guidance, but the principles are not a tight fit with the cybertheft of personal information.

Additional languages available: 中文

ISACA Journal Article

IS Audit Basics: Is There Such a Thing as a Bad IS Auditor? Part 1

Author: Ed Gelbstein

Previous columns explored what it takes for an audit to be successful and also the characteristics of a good auditor.

ISACA Journal Article

IS Audit Basics: Trust, but Verify

Author: Ed Gelbstein

There is much to be gained from an open, collaborative relationship between auditors and auditees in which both parties focus on understanding and managing business risk.

ISACA Journal Article

The Network: Urmilla Persad

Author: ISACA

What do you anticipate being the biggest compliance challenge in 2016? How will you face it?

Online Exclusives

ISACA Journal Article

A Framework for Automated Compliance Monitoring in Oracle/SAP Environment

Author: Balraj Thuppalay

It is not uncommon for IT departments to be unaware of security best practices specific to SAP and to lack the business knowledge necessary to perform a segregation-of-duties (SoD) analysis.

ISACA Journal Article

Evaluating IT Integration Risk Prior to Mergers and Acquisitions

Author: Deepak Khazanchi

Evaluating IT Integration Risk Prior to Mergers and Acquisitions. Review of Risk and Benefits associated with IT integration in M&A.

ISACA Journal Article

Maturity Security Information Governance: Applied to the Telecom Segment in Brazil

Authors: Kleuber Tormim, Vitor Tormin Nishi, and Mauricio Rocha Lyra

Information security is a primary concern that pervades all organizations and comprises confidentiality.

ISACA Journal Article

Book Review: People-centric Skills

Authors: Danny M. Goldenberg and Manny Rosenfeld

This book is written as an intriguing tale about the lives of a fictional audit team, their daily client interactions and their aspirations to grow into an excellent audit team. The authors highlight the work ethic, techniques and skill sets required of a high-performing, modern-day audit team.

ISACA Journal Article

Security in the Payment Card Industry: The Importance of Data Integrity

Author: Mark Johnston

Security in the Payment Card Industry: The Importance of Data Integrity. Large retailers to mom & pops are vulnerable if proper data security is not in place.

ISACA Journal Article

Using Color to Enhance Spreadsheet Accuracy and Usefulness

Authors: Joshua J. Filzen and Mark G. Simkin

Auditors often embed colored labels in spreadsheets to enhance accuracy and usefulness. This article presents ideas using Microsoft Excel 2013.