Featured Articles

Online Exclusives

ISACA Journal Article

Are IT General Controls Outdated?

Author: Jouke Albeda

When testing IT general controls, additional controls related to security assessments, data asset protection, secure data transit, endpoint protection, vulnerability monitoring, security monitoring and secure disposal should be considered for the relevant application, database, operating system and network components in the IT environment.
ISACA Journal Article

When Data Protection Is a Hindrance Rather Than a Facilitator

Author: Rupert Brown

Data protection has become a catch-all excuse for poor service—a problem that can only be solved with a mixture of transparency (both governmental and organizational) and regulatory initiatives.

ISACA Journal Article

Using FLOSS to Implement COBIT for I&T Governance

Authors: Laura Jaime and João Barata

Free/libre open source software (FLOSS) can be used to achieve greater freedom along with vendor independence and financial benefits in enterprise software portfolios.
ISACA Journal Article

Establishing Enterprise Roles for Data Protection

Authors: Sai Krishnan Mohan and Ranganath Iyengar

There are clear challenges associated with how specific types of data need to be safeguarded, stored and shared on a need-to-know basis, and data governance mechanisms provide guidelines for these practices.
ISACA Journal Article

Adding a New KPI to Determine Whether Directors and Officers Have Met Their Legal Duties

Author: Charles Cresson Wood

Information security and privacy teams need an easy-to-adopt, readily deployed, inexpensive and fully scripted compliance audit process to arrive at a new key performance indicator.

ISACA Journal Article

Benefits and Challenges of Implementing Cross-System SoD Monitoring Using SAP GRC

Author: Snedhal D. Pandya

Cross-system user-level segregation of duties risk analysis between SAP and non-SAP systems provides insight into the access risk that prevails in the user base and helps remediate it through appropriate mitigation controls or the removal of conflicting access.
ISACA Journal Article

Optimum Security Cognizance Through People, Process and Behavior Transformation

Author: Vimal Mani

The importance of cybersecurity in enterprise ecosystems is constantly being communicated to the workforce to create awareness, which helps enterprises reduce their attack surfaces.