- Published: 12 November 2012
- Written by NStinchcombe
Information is the currency of the 21st century and the role of those who audit IT is more critical than ever. CNN Money recently said IT auditing is one of the fastest-growing careers. To help auditors handle their increasing demands and responsibilities, ISACA, a nonprofit association serving 100,000 IT professionals in 180 countries, publishes customizable IT audit/assurance programs for current issues, including social media and cybercrime. The newest from ISACA are:
· Cybercrime Audit/Assurance Program, which helps auditors provide management with an independent assessment of the effectiveness of cybercrime prevention and detection, and incident management.
· Biometrics Audit/Assurance Program, which helps auditors provide management with an independent assessment of biometric systems and their alignment with enterprise policies and industry good practices.
· E-commerce and Public Key Infrastructure (PKI) Audit/Assurance Program, which helps auditors provide management with an evaluation of IT’s preparedness for intrusion or major failure of e-commerce or PKI and identification of issues that may impact related security.
· VPN Security Audit/Assurance Program, which helps auditors provide management with an independent assessment of the virtual private network (VPN) implementation.
“ISACA’s audit programs can be used by auditors worldwide as a road map for specific assurance processes,” said Greg Grocholski, CISA, international president of ISACA and chief audit executive at The Dow Chemical Company. “They can be customized by IT auditors in any type of environment to help them conduct effective reviews that will help ensure trust and value in the enterprise’s information systems.”
The audit/assurance programs are based on the standards and guidance in ISACA’s IT Assurance Framework (ITAF) and align with the globally recognized COBIT business framework for governance and management of IT. They have been developed by experienced assurance professionals and are peer reviewed. The programs are downloadable in a Word document and can be easily customized to fit specific operating environments. They can also be used by security and business professionals, who will benefit from applying the control objectives and audit steps to make the respective scope areas more robust.
The audit/assurance programs are free for ISACA members and US $45 for nonmembers at www.isaca.org. ITAF is available at www.isaca.org/ITAF. COBIT is available at www.isaca.org/cobit.
ISACA is also updating its IS Audit and Assurance Standards and is seeking comments on the exposure draft at www.isaca.org/standardexposure. The comment period remains open through 28 December 2012.
With more than 100,000 constituents in 180 countries, ISACA® (www.isaca.org) is a leading global provider of knowledge, certifications, community, advocacy and education on information systems (IS) assurance and security, enterprise governance and management of IT, and IT-related risk and compliance. Founded in 1969, the nonprofit, independent ISACA hosts international conferences, publishes the ISACA® Journal, and develops international IS auditing and control standards, which help its constituents ensure trust in, and value from, information systems. It also advances and attests IT skills and knowledge through the globally respected Certified Information Systems Auditor® (CISA®), Certified Information Security Manager® (CISM®), Certified in the Governance of Enterprise IT® (CGEIT®) and Certified in Risk and Information Systems Control™ (CRISC™) designations.
ISACA continually updates and expands the practical guidance and product family based on the COBIT framework. COBIT helps IT professionals and enterprise leaders fulfill their IT governance and management responsibilities, particularly in the areas of assurance, security, risk and control, and deliver value to the business.
Participate in the ISACA Knowledge Center: www.isaca.org/knowledge-center
Follow ISACA on Twitter: https://twitter.com/ISACANews
Join ISACA on LinkedIn: ISACA (Official), http://linkd.in/ISACAOfficial
Like ISACA on Facebook: www.facebook.com/ISACAHQ
Contact:
Kristen Kessinger, +1.847.660.5512, This email address is being protected from spambots. You need JavaScript enabled to view it.
Hannah Rafferty, +44 (0) 207 183 2836, This email address is being protected from spambots. You need JavaScript enabled to view it.