Home / Resources / ISACA Journal / Past Issues / 2013

Domain:

More Filters
Card List
A COBIT Approach to Regulatory Compliance and Defensible Disposal
ISACA Journal Article

A COBIT Approach to Regulatory Compliance and Defensible Disposal

The successful IT governance plan demands a modern and transparent approach to data retention and routine disposal. Today’s chief information officers (CIOs) face an unprecedented array of challenges...

Authors: Lorrie Luellig and Jake Frazier
Common Myths of Service Organization Controls (SOC) Reports
ISACA Journal Article

Common Myths of Service Organization Controls (SOC) Reports

In today’s dynamic environment, organizations face multiple challenges in terms of various standards and compliance requirements.

Author: Deepa Seshadri
DDoS Attacks—A Cyberthreat and Possible Solutions
ISACA Journal Article

DDoS Attacks—A Cyberthreat and Possible Solutions

Distributed denial of service (DDoS) is one of the most diffused types of cyberattacks that represent a great concern for governments and institutions today.

Author: Ajay Kumar
How to Measure Security From a Governance Perspective
ISACA Journal Article

How to Measure Security From a Governance Perspective

Good governance relies on reports or measures that either assess the adequacy of information security, the security program and the return on security investment (ROSI) or the progress toward fixed objectives.

Author: Andrej Volchkov
How to Properly Audit a Client Who Uses a Service Organization—SOC Report or No SOC Report
ISACA Journal Article

How to Properly Audit a Client Who Uses a Service Organization—SOC Report or No SOC Report

The new standards from the American Institute of Certified Public Accountants (AICPA) on service organization controls1 have created a situation in which IT auditors, especially Certified Information Systems Auditors (CISAs), are particularly needed and useful.

Author: Tommie W. Singleton
IT Policy Framework based on COBIT 5
ISACA Journal Article

IT Policy Framework based on COBIT 5

The COBIT 5 good-practice framework for governance and management of enterprise IT (GEIT) incorporates many widely accepted concepts and theories from general management and academic IT literature. Exploring how the core principles of the framework are derived from insights from theory and literature...

Authors: Steven De Haes, Roger Debreceny and Wim Van Grembergen
IT Security Responsibilities Change When Moving to the Cloud
ISACA Journal Article

IT Security Responsibilities Change When Moving to the Cloud

How will an organization’s information security staff be affected if the organization’s computer systems are moved to a cloud environment?

Author: Larry G. Wlosinski
JOnline: An Introduction to Auditing HP NonStop Servers—Review of User Access
ISACA Journal Article

JOnline: An Introduction to Auditing HP NonStop Servers—Review of User Access

For at least 35 years, HP NonStop (previously known as Tandem) has been a widely used operating system (OS) to support critical services such as automated teller machines (ATMs), stock exchanges and the airline industry.

Authors: David Ramirez and Nikos Zarras
JOnline: Embed With SFIA—Secrets From the Missing Framework
ISACA Journal Article

JOnline: Embed With SFIA—Secrets From the Missing Framework

Why is value so hard to sustain? What is the secret to making best practices stick? How does an organisation make process improvement and good governance last when the consultants leave?

Author: Simon Roller
JOnline: Mitigating Software Supply Chain Risk
ISACA Journal Article

JOnline: Mitigating Software Supply Chain Risk

Examination of risk related to software supply chains demonstrates that software supply chains are subjected to risk that is specific to software.

Author: C. Warren Axelrod
JOnline: Using Personal Mobile Devices in a Business Setting
ISACA Journal Article

JOnline: Using Personal Mobile Devices in a Business Setting

Mobile devices refer to a wide variety of handheld computing devices that allow people to access and process data by running various types of application software (apps).

Authors: Pascal A. Bizarro, Andy Garcia and Jacob Nix
Key Elements of an Information Risk Profile
ISACA Journal Article

Key Elements of an Information Risk Profile

Information risk has become a top-of-mind issue for many business leaders and information risk management security (IRMS) professionals.

Author: John P. Pironti
Man in the Browser—A Threat to Online Banking
ISACA Journal Article

Man in the Browser—A Threat to Online Banking

The popularity of online banking has been on the rise. In 2005, Bob Sullivan of MSNBC quoted research figures from the Pew Internet and American Life Project, which showed that 53 million US citizens were banking online in 2004, and that online banking was the fastest growing Internet activity.

Author: Ed Gelbstein
Quantifying Information Risk and Security
ISACA Journal Article

Quantifying Information Risk and Security

Conducting risk assessments and the calculation of a return on investment (ROI) on information security is challenging. ISACA’s Risk IT1 framework defines IT risk as “The business risk associated with the use, ownership, involvement, influence and adoption of IT within an enterprise.”

Author: Ed Gelbstein
Risk and Compliance—For Better or Worse?
ISACA Journal Article

Risk and Compliance—For Better or Worse?

In today’s business environment, many companies are required to comply with multiple industry and government mandates that govern IT security.

Author: Torsten George
How to Measure Security From a Governance Perspective
ISACA Journal Article

How to Measure Security From a Governance Perspective

Good governance relies on reports or measures that either assess the adequacy of information security, the security program and the return on security investment (ROSI) or the progress toward fixed objectives.

Author: Andrej Volchkov
What Is Big Data and What Does It Have to Do With IT Audit?
ISACA Journal Article

What Is Big Data and What Does It Have to Do With IT Audit?

For many years, IT auditors have been able to rely on comparatively elementary data analysis tools to perform analyses to draw conclusions. With the recent explosion in the volume of data generated for business purposes (e.g., purchase transactions, network device logs, security appliance alerts), current tools may now not be sufficient.

Authors: Kumar Setty and Rohit Bakhshi