THE 1s AND 0s OF COMPUTING

The value of data depends on how effectively they are governed, managed and secured by an organization. Data are essential assets, but also sources of risk.

Featured Articles

ISACA Journal Article

Essential Assumptions for Effective Data Security

Authors: Kevin Alvero and Brian Alvero

For data security efforts to be effective, it is critical that people in all areas and levels of the enterprise operate under five key data security-related assumptions.

Additional languages available: 中文

ISACA Journal Article

Scaling the Future of Collecting Internal Audit Interview Evidence

Authors: Matthew D. Pickard and David A. Wood

New technology offers the potential to cost effectively collect large interview data sets using an automated auditing interview process with virtual interviewers.

Additional languages available: 中文

ISACA Journal Article

Beware the Traps of Data Governance and Data Management Practice

Author: Guy Pearce

Data-driven decision-making can never entirely be about making decisions based on hard data as opposed to intuition, observation or guesswork because most data are never in a perfect state...

Additional languages available: 中文

ISACA Journal Article

The Future of Privacy: Insights From the EU Digital COVID Certificate

Authors: Till Mueller and Gerald F. Burch

The development of the EU Digital COVID Certificate (EUDCC) offers some insights into what the future may hold for managing individual privacy while supporting the effective use of information.

ISACA Journal Article

Sponsored: To Stay Relevant, InfoSec Must Strengthen Its Business Partnerships

Author: John Wheeler

To effectively manage digital risk, InfoSec professionals and business leaders must work in tandem to increase their mutual risk understanding and mitigation efforts.

ISACA Journal Article

An Ethics-Based Algorithm for Governing Data Ethics

Author: Wanbil W. Lee

Data quality is a crucial issue to data protection, and data bias is a hidden nuance to protecting that quality—data governance is needed.

ISACA Journal Article

Case Study: Driving Digital Transformation Through COBIT

Author: Katie Teitler

Based on a foundation of COBIT, CBN has achieved synergy across the organization as it relates to IT projects and their place in enterprise risk and strategy as a direct result of improvements and...

ISACA Journal Article

Performing Risk Assessments of Emerging Technologies

Authors: Michael Kelly and Adeline Chan

Emerging technologies represent a major source of risk, and their complexities make those risk areas especially difficult to assess.

Columns

ISACA Journal Article

Letter From the CEO

Author: David Samuelson

As the ISACA Journal concludes its 50th anniversary year, it is a great time to both reflect on the past and get excited about the future...

ISACA Journal Article

Information Security Matters: Convergence—Where Next?

Author: Steven J. Ross

Does this convergence of specialties enhance or vitiate the effectiveness of each of them individually? The answer depends on whether IT control is a zero-sum...

ISACA Journal Article

IS Audit in Practice: Do Data Go to Waste?

Author: Cindy Baxter

Data management is built on accuracy and relevance, and both characteristics are the mainstay of an IS auditor’s inspection criteria.

ISACA Journal Article

Innovation Governance: Balancing Innovation With Data Protection

Author: K. Brian Kelley

Innovation does not give license to bypass the usual questions that are asked when we have more time. It requires us to answer or evaluate them more quickly.

Online Exclusives

ISACA Journal Article

Are IT General Controls Outdated?

Author: Jouke Albeda

When testing IT general controls, additional controls related to security assessments, data asset protection, secure data transit, endpoint protection, vulnerability monitoring, security monitoring and secure disposal should be considered for the relevant application, database, operating system and network components in the IT environment.

ISACA Journal Article

When Data Protection Is a Hindrance Rather Than a Facilitator

Author: Rupert Brown

Data protection has become a catch-all excuse for poor service—a problem that can only be solved with a mixture of transparency (both governmental and organizational) and regulatory initiatives.

ISACA Journal Article

Using FLOSS to Implement COBIT for I&T Governance

Authors: Laura Jaime and João Barata

Free/libre open source software (FLOSS) can be used to achieve greater freedom along with vendor independence and financial benefits in enterprise software portfolios.

ISACA Journal Article

Establishing Enterprise Roles for Data Protection

Authors: Sai Krishnan Mohan and Ranganath Iyengar

There are clear challenges associated with how specific types of data need to be safeguarded, stored and shared on a need-to-know basis, and data governance mechanisms provide guidelines for these practices.

ISACA Journal Article

Adding a New KPI to Determine Whether Directors and Officers Have Met Their Legal Duties

Author: Charles Cresson Wood

Information security and privacy teams need an easy-to-adopt, readily deployed, inexpensive and fully scripted compliance audit process to arrive at a new key performance indicator.

ISACA Journal Article

Benefits and Challenges of Implementing Cross-System SoD Monitoring Using SAP GRC

Author: Snedhal D. Pandya

Cross-system user-level segregation of duties risk analysis between SAP and non-SAP systems provides insight into the access risk that prevails in the user base and helps remediate it through appropriate mitigation controls or the removal of conflicting access.

ISACA Journal Article

Optimum Security Cognizance Through People, Process and Behavior Transformation

Author: Vimal Mani

The importance of cybersecurity in enterprise ecosystems is constantly being communicated to the workforce to create awareness, which helps enterprises reduce their attack surfaces.