Volume 2, 2018 | ISACA Journal

Featured Articles

Applying a Technological Integration Decision Framework to Innovation Governance

Innovation is the process of transforming an idea or concept into a functional and marketable value proposition reflecting creative opportunity.

Additional languages available: Español | 中文

ISACA Journal Article

Information Security Architecture: Gap Assessment and Prioritization

Author: Rassoul Ghaznavi-Zadeh

A top-down approach to enterprise security architecture can be used to build a business-driven security architecture.

Additional languages available: Español

ISACA Journal Article

Sponsored Feature: Centralized, Model-Driven Visibility Key to IT-OT Security Management

Author: Ron Davidson

The threat landscape has changed significantly for operational technology (OT) environments as their connectivity to IT networks and the Internet has exponentially increased.

Additional languages available: Español

ISACA Journal Article

Technology’s Role in Enterprise Risk Management

Author: Jennifer Bayuk

The new COSO ERM framework document, Enterprise Risk Management—Integrating With Strategy and Performance, is expected to have a level of global influence similar to Internal Control–Integrated Framework.

Additional languages available: Español | 中文

ISACA Journal Article

The Missing Link in Assessing Cyberrisk Factors Through Supply Chains

Author: Ofir Eitan

In February 2014, one of the biggest discount retailers in the United States, Target Corporation, reported a data breach within its network system that caused the leak of 110 million customers’ financial and personal information.

Additional languages available: Español

ISACA Journal Article

Why Cyber Insurance Needs Probabilistic and Statistical Cyberrisk Assessments More Than Ever

Author: Indrajit Atluri

In 2016, there were instances where cybersecurity stocks did not fare well, and one reason attributed to this occurrence was that investors needed some high-profile breaches2 to lure them back into investing in cybersecurity stocks.

Additional languages available: Español

Columns

ISACA Journal Article

Tools: Five Linux Distributions With Tools for Audit

Author: Ed Moyle

This article identifies Linux distributions that provide collections of hundreds or, in some cases, thousands of tools, many of which audit professionals might find valuable.

Additional languages available: Español

ISACA Journal Article

HelpSource Q&A

Author: Sunil Bakshi

Traditionally, our organization has a policy to adopt established technology solutions.

Additional languages available: Español

ISACA Journal Article

Information Security Matters: Disaster Recovery Management in the Multimodal Era

Author: Steven J. Ross

The concept of an organization’s information systems operating in a space and on equipment owned by that organization has been replaced by systems residing in.

Additional languages available: Español

ISACA Journal Article

IS Audit Basics: Innovation in IT Audit Process

Author: Ian Cooke

In June 2015, ISACA began publishing a set of white papers titled “Innovation Insights.”

Additional languages available: Español

ISACA Journal Article

The Network: Stephen Doyle

Author: ISACA

What is the biggest security challenge that will be faced in 2018?

Additional languages available: Español

Online Exclusives

ISACA Journal Article

Auditing Big Data in the Enterprise

Author: Joshua McDermott

Over the past several years, big data has emerged as one of the top strategic technology priorities for organizations.

ISACA Journal Article

AWS Migration: Advantages, Risk & Mitigation Measures

Authors: Ray Cheung, Vikas Sharma, and Bhupinder Singh

It is no surprise that many enterprises, ranging from early start-ups to mature global enterprises, have considered or implemented a migration to Amazon Web Services’ (AWS) cloud computing services.

ISACA Journal Article

Complying With GDPR: An Agile Case Study

Authors: Mina Miri, Farbod H. Foomany, and Nathanael Mohammed

Designed to give European Union residents better privacy rights, the EU General Data Protection Regulation (GDPR) comes into force in May 2018.

ISACA Journal Article

Digital Ethics & the Blockchain

Author: Dan Blum

How the digital transformation turns out may depend on how well it supports core values such as prosperity, fairness, integrity, transparency and privacy atop an Internet that erodes some of these values.

ISACA Journal Article

E-Governance of Currencies

Author: Vijayavanitha Sankarapandian

Innovative ideas pave the way for efficient and seamless governance in any type of organization.

ISACA Journal Article

Minimizing the High Risk of Failure of Corporate Innovation

Author: Guy Pearce

Much of today’s new technology may not impact the organization’s business directly, but it almost certainly will impact it indirectly

ISACA Journal Article

Rethinking User Access Certifications

Author: Vincent J. Schira

Access certification involves a manager or system owner reviewing users’ entitlements (access) to a system or systems to ensure that the users have access to only what they need.

ISACA Journal Article

Sometimes, Cyberattackers Are Going to Get In: The State of Cybersecurity 2018

Author: Keith Price

The cybersecurity problem in a nutshell is that criminals are launching cyberattacks against the global attack surface comprised of the world’s people.