Volume 1, 2017 | ISACA Journal

Featured Articles

A Machine Learning Approach for Telemedicine Governance

Authors: Shounak Pal and Arunabha Mukhopadhyay

Telemedicine is a component of ehealth that uses information and communication technology (ICT) to deliver health care services to overcome distance and connect the provider and the patient.

Additional languages available: Español | 中文

ISACA Journal Article

Phishing Detection and Loss Computation Hybrid Model: A Machine-learning Approach

Authors: Baidyanath Biswas and Arunabha Mukhopadhyay

Phishing involves social engineering of data over the Internet to acquire personal or business information from unsuspecting users.

Additional languages available: Español

ISACA Journal Article

Smashing the Information Security Policy for Fun and Profit

Author: David Eduardo Acosta R.

One of the chief components of an organization’s information security strategy is the security policy.

Additional languages available: Español | 日本語

ISACA Journal Article

Sponsored Feature: Indicators of Exposure and Attack Surface Visualization

Author: Ravid Circus

Working with identified IOEs rather than vulnerabilities and other risk data allows security teams to use the power of contextual analysis to determine actions that will reduce their attack.

Additional languages available: Español

ISACA Journal Article

The Automation Conundrum

Author: Phillimon Zongo

Learn how as intelligent systems increasingly take on vital business roles, the risk that crucial business decisions might be based on flawed algorithms invariably rises.

Additional languages available: Español | 日本語

Columns

ISACA Journal Article

HelpSource

Author: Sunil Bakshi

I have heard from vendors that cognitive technologies such as machine learning can assist in my risk management and security efforts.

Additional languages available: Español

ISACA Journal Article

Information Security Matters: State-on-state Cyberconflicts

Author: Steven J. Ross

In the second quarter of 2016, a colleague shared with me an article and a database titled “The Dynamics of Cyber Conflict Between Rival Antagonists, 2001–11,” written by Brandon Valeriano of the University of Glasgow and Ryan C. Maness of the University of Illinois.

Additional languages available: Español

ISACA Journal Article

IS Audit Basics: Preparing for Auditing New Risk, Part 1

Author: Ed Gelbstein

This is the first of two articles attempting something unwise: predicting future risk arising from information systems and technology.

Additional languages available: Español

ISACA Journal Article

The Network: Gail Coury

Author: ISACA

How do you think the role of the information security professional is changing or has changed?

Additional languages available: Español

ISACA Journal Article

Tools: Using Open Source Tools to Support Technology Governance

Author: Ed Moyle

Most practitioners are already very accustomed to using technical tools for specific tactical purposes when it comes to security or assurance within their environments.

Additional languages available: Español | 中文

Online Exclusives

ISACA Journal Article

Capability Framework for Privileged Access Management

Authors: Richard Hoesl, Martin Metz, Joachim Dold, and Stefan Hartung

The average total cost of a data breach is about US $4 million, whereas the average cost for a stolen record increased slightly from US $154 in 2015 to US $158 in 2016.

ISACA Journal Article

Book Review: COBIT 5 for Business Benefits Realization

Author: ISACA

COBIT 5 for Business Benefits Realization is part of the COBIT 5 body of knowledge, which covers audit and assurance, risk management, information security, regulations and compliance, IT operations, governance of IT (GEIT), as well as value from IT investments.

ISACA Journal Article

Evolving Cyberrisk Practices to Meet Board-level Reporting Needs

Authors: Jack Jones and Chief Risk Scientist

Imagine being an executive sitting on the board of directors for an organization. Of the following two risk report statements, which one would likely be more meaningful and useful?

ISACA Journal Article

IS Audit Basics: Preparing for Auditing New Risk, Part 2

Author: Ed Gelbstein

Part 1 of this column explored domains of risk that are rapidly becoming apparent as they take unprepared organizations (in terms of policies on how to deal with them) by surprise. Social networks and bring your own device (BYOD) are two notable examples.

ISACA Journal Article

Kickstarting Cloud ROI

Author: Cheryl Ritts

Many enterprises are quick to leap into cloud relationships. Very often, they do so without any analysis—formal or informal—of the value they expect to get in return.

ISACA Journal Article

Smart Sustainable Cities Need Well-governed Disruptive IT, Not Just IT

Author: Graciela Braga

Most people live in cities, so they enjoy or endure city attributes as part of their day-to-day lives.

ISACA Journal Article

The Persistent Insider Threat: Is Enough Being Done?

Author: Rodney Piercy

In today’s world, and the main asset for businesses is the data they store. As enterprises become more dependent on technology and data.

ISACA Journal Article

What Every CISO Must Know About SSH Keys

Author: Tatu Ylonen

Secure Shell (SSH), also known as Secure Socket Shell, is a cryptographic network protocol for operating network services securely over an unsecured network.