Volume 3, 2018 | ISACA Journal

Featured Articles

Building Bridges With the Board—Innovation in Information Governance

IT professionals and enterprise board members live in two very different worlds. Boards worry about strategic concerns such as revenue.

Additional languages available: Español

ISACA Journal Article

Clash of the Titans

Author: Ofir Eitan

One of the major challenges chief information security officers (CISOs) face in almost any organization is prioritizing information security interests with regard to IT interests.

Additional languages available: Español | Português

ISACA Journal Article

Cybersecurity vs. Master Data Management

Authors: Chip Jarnagin and Sonja Hammond

The exposure of data for up to 14 million of Verizon’s customers in July 2017 was an enormous embarrassment, particularly for an organization that presents itself as a premium cybersecurity consultancy.

Additional languages available: Español | Português

ISACA Journal Article

Healthcare Security—Three Paradoxes and the Need for a Paradigm Shift

Author: Giuliano Pozza

Is the CIO role still relevant for IT security in healthcare? The world of information and data management is changing faster than anyone could have predicted.

Additional languages available: Español

ISACA Journal Article

Intellectual Property Protection for High-Tech’s Crown Jewels

Authors: Ray Cheung, and Mike Porter

Theft of intellectual property (IP) is an emerging threat and a topic of boardroom conversation for organizations across the United States, particularly for those in the high-tech industry.

Additional languages available: Español

ISACA Journal Article

Secure Elections in a Smart World

Author: Ed Moyle

When people hear the term “cyberwarfare,” there are a few things that come to mind.

Additional languages available: Español

ISACA Journal Article

Security in Depth

Author: Charles Hale

The methodology of network security has changed drastically due to the aggressive pace at which data have grown and the need for constant real-time access becoming the norm.

Additional languages available: Español

Columns

ISACA Journal Article

Tools: Active Defense

Author: Ian Cooke

Every year, ISACA conducts its annual Global State of Cybersecurity research. The second part of the survey asks about security practices in the field: what is working and what is not.

Additional languages available: Español

ISACA Journal Article

HelpSource Q&A

Author: Sunil Bakshi

How can we assess risk associated with blockchain technology?

Additional languages available: Español

ISACA Journal Article

Information Security Matters: Security in the Migration to a Multi-Modal Environment

Author: Steven J. Ross

I have been a data center rat my whole career, starting as a systems engineer for a hardware vendor and, today, as a consultant.

Additional languages available: Español

ISACA Journal Article

IS Audit Basics: Auditing Data Privacy

Author: Ian Cooke

Determining pre-audit planning for the subject, objective, scope, and procedures for data gathering.

Additional languages available: Español

ISACA Journal Article

Letter From the Editor: From Print to Digital—The Journal Transformation

Author: Jen Hajigeorgiou

As technology continues to transform the way people consume information, the work of ISACA’s professional community becomes more important—and challenging.

Additional languages available: Español

ISACA Journal Article

The Network: Lucio Augusto Molina Focazzio

Author: ISACA

How do you think the role of the IS audit professional is changing or has changed?

Additional languages available: Español

Online Exclusives

ISACA Journal Article

As Hospitals Get Smart, Cybersecurity Challenges Will Increase

Authors: Justine Bone, Violet Morris and Chadwick Williamson

Healthcare technology is at a critical juncture of rapid growth, seamless implementation and the need for constant adaptability.

ISACA Journal Article

Building a Strong Security Posture Begins With Assessment

Author: Tyler Hardison

Hacked! Attacked! Leaked! Daily news headlines scream high-profile information security failures and their consequences.

ISACA Journal Article

Event Category Catalog for SOC Use Cases

Author: Aleksandr Kuznetcov

The majority of modern organizations have embarked on the path security operations centers (SOCs) are building.

ISACA Journal Article

IT Risk Management Based on COBIT 5 for Risk at Deutsche Telekom AG

Author: Horst Moll

The purpose of risk management is to protect the values of an organization.

ISACA Journal Article

Merging Internal Audit Departments

Authors: Kevin Alvero, Randy Pierson, and Wade Cassels

As organizations try to keep up with rapid changes in technology, they are using acquisitions as a way to quickly develop entirely new lines of business or to simply close gaps in technological capability.

ISACA Journal Article

Never Waste a Good Information Security Incident

Authors: Yuri Bobbert and Talitha Papelard-Agteres

Hospitals, major organizations and government offices across the globe had been hit by a massive wave of cyberattacks that seized control of computers until the victims paid a ransom.

ISACA Journal Article

Protect, Detect and Correct Methodology to Mitigate Incidents: Insider Threats

Author: Max Alexander

In terms of cybersecurity, many organizations tend to worry about external threats such as hacking or distributed denial-of-service (DDoS) attacks.

ISACA Journal Article

The Methods and Costs of Data Breaches

Author: Mohammed J. Khan

“Data breach” has become a common term, so much so that it seems as though not a day goes by without mention of a data breach occurring.

ISACA Journal Article

Web Applications Authorization Risk When Using Windows Accounts

Author: Alex Quiles

The use of Windows accounts to authorize users to applications introduces risk that an auditor should evaluate.

The Smart Transformation

Featured Articles

Columns

Online Exclusives