Standards IT-Revision - Revision-heute

ISACA/ITGI Research Publications

  COBIT 5
This newest version provides renewed, authoritative governance and management framework for enterprise information and related technology, building on the previous COBIT framework, linking and reinforcing all other major ISACA frameworks and guidance, such as:

§  Board Briefing on IT Governance, 2^nd Edition

§  Business Model for Information Security™ (BMIS™)

§  IT Assurance Framework™ (ITAF™)

§  Risk IT Framework

§  Taking Governance Forward

§  Val IT™ Framework

  COBIT 5 Implementation
Provides a good-practice approach for implementing governance of enterprise IT (GEIT) based on a continual improvement life cycle that should be tailored to suit the enterprise’s specific needs. It covers the following subjects:

§  Positioning GEIT within an enterprise

§  Taking the first steps towards improving GEIT

§  Implementation challenges and success factors

§  Enabling GEIT-related organizational and behavioral change

§  Implementing continual improvement that includes change enablement and program management

§  Using COBIT 5 and its components

  COBIT 5:  Enabling Processes
Complements COBIT 5 and contains a detailed reference guide to the processes defined in the COBIT 5 process reference model.

  COBIT and Application Controls:  A management Guide
This guide helps business executives, business management, and IT management, as well as IT developers and implementers, internal and external auditors and other professionals manage and provide assurance regarding application controls.

  COBIT Security Baseline: An Information Security Survival Kit, 2nd Edition
This guide, based on COBIT 4.1, consists of a comprehensive set of resources that contains the information organizations need to adopt an IT governance and control framework. COBIT covers security in addition to all the other risks that can occur with the use of IT. COBIT Security Baseline focuses on the specific risk of IT security in a way that is simple to follow and implement for the home user or the user in small to medium enterprises, as well as executives and board members of larger organizations.

  COBIT 4.1
Incremental changes to version 4.0, presenting a streamlined, pragmatic and business-focused approach to implementing IT governance enterprisewide.

  IT Control Objectives for Sarbanes-Oxley 2nd Edition
ITGI has released an updated edition of its well-received publication, IT Control Objectives for Sarbanes-Oxley. The first edition, published in 2004, has been downloaded more than 250,000 times. Companies around the world have used it as a tool for evaluating IT controls in support of Sarbanes-Oxley compliance. Experts from many organizations, including the top 10 accounting and professional firms, provided input and direction for the update. Now available in Japanese and Italian.

  Information Security Governance: Guidance for Boards of Directors and Executive Management 2nd Edition
Reviews the increasing importance of governance over the security aspect of information and related systems. Based on the IT governance framework described in the Board Briefing on IT Governance.

  COBIT Quickstart
This is an abbreviated version of COBIT designed for small to medium enterprises, or those organizations in which IT is not strategically critical to enterprise success. Available from the ISACA Bookstore.

Articles/Papers

  IT Assurance Framework
Issued by ITGI’s affiliate, ISACA, ITAF is a comprehensive and good-practice-setting model that provides guidance on the design, conduct and reporting of IT audit and assurance assignments; defines terms and concepts specific to IT assurance; and establishes standards that address IT audit and assurance professional roles and responsibilities, knowledge and skills, and diligence, conduct and reporting requirements.

  Information Security Risk Assessment Guide - Practices of Leading Organizations (PDF, 716K)
From U.S. General Accounting Office