ISACA COBIT 2019: Aligning IT with Business Goals Using COBIT
Aligning enterprise goals and technology outcomes Alignment fails when technology planning starts with a product list instead of a business objective. COBIT 2019…
Read articleVENDOR / EXAMTOPICS EDITORIAL
ISACA.
Editorial material about ISACA and its technologies, assessments and credentials.
PUBLISHED COVERAGECurated by subject
ISACA COBIT 2019: COBIT Governance and Management Objectives
COBIT 2019 governance objectives COBIT 2019 is a framework for the governance and management of enterprise information and technology, not a catalog of…
Read articleISACA CISM: Security Resources & Capability Maturity
Security programs are constrained by more than budget. They depend on people, decision rights, processes, architecture, tooling, supplier relationships, institutional knowledge, and the…
Read articleISACA CISM: Security Program Metrics That Leaders Can Use
Security metrics are useful only when they help someone make a decision. Programs often collect hundreds of measurements because tools can produce them,…
Read articleISACA CISM: Information Security Governance
Information security governance is the mechanism that turns security from a collection of technical activities into an accountable business capability. Governance establishes who…
Read articleISACA CISM: Incident Management at the Program Level
Incident management at the program level is the discipline of turning individual security events into a repeatable management capability. Technical responders still investigate…
Read articleISACA CISM: Executive Communication for Security Leaders
Security leaders are responsible for more than identifying threats and operating controls. They must explain risk, priorities, incidents, investment needs, and program performance…
Read articleISACA CISM: Enterprise Risk Management for Security Managers
Security managers operate inside a broader enterprise risk environment. Cyber threats, data protection, resilience, third-party dependency, fraud, safety, financial exposure, compliance, and strategic…
Read articleISACA CRISC: Third-Party Technology Risk Management
Organizations increasingly rely on cloud providers, SaaS platforms, managed services, payment processors, software vendors, contractors, data suppliers, and specialist technology partners. Those relationships…
Read articleISACA CISM: Business-Aligned Security Strategy
An information security strategy should explain how security enables the organization to pursue its goals while keeping risk within acceptable boundaries. It is…
Read articleISACA CRISC: Technology Risk in Cloud and AI Programs
Cloud platforms and artificial intelligence programs can accelerate product delivery, analytics, automation, and new customer experiences, but they also change the way technology…
Read articleISACA CRISC: Risk Monitoring with KRIs and Control Metrics
Risk monitoring converts a periodic assessment into an ongoing management process. The organization needs evidence that exposure is moving toward or away from…
Read articleISACA CRISC: Risk Identification & Scenario Analysis
Risk identification is the discipline of describing what could happen to an organization in a form that can be analyzed, owned, and acted…
Read articleISACA CRISC: Risk Responses and Control Objectives
Risk management becomes operational when an organization decides what it will do about identified exposure. A risk assessment may describe threats, vulnerabilities, likelihood,…
Read articleISACA CISA: Risk-Based Audit Planning
Risk-based audit planning directs limited assurance resources toward the areas where failure would matter most. Instead of building the annual audit plan from…
Read article