ISACA Updates 10 IT Audit Programs
February 2009 by Marc Jacob
ISACA has updated 10 key information technology (IT) audit/assurance programs that serve as road maps to help organizations improve controls and protect the privacy and security of their IT.
ISACA’s IT audit/assurance programs are used by enterprises around the world. The updated programs are based on ISACA’s IT Assurance Framework (ITAF), available as a free download at www.isaca.org/itaf. ITAF provides a single source from which IT audit and assurance professionals can seek guidance, research policies and procedures, obtain audit and assurance programs, and develop effective reports.
The updated audit/assurance programs are:
· Change Management
· Generic Application
· Identity Management
· IT Continuity Planning
· Network Perimeter Security
· Outsourced IT Environments
· Security Incident Management
· Systems Development and Project Management
· UNIX/LINUX Operating System Security
· z/OS Security
Each program is designed for use by Certified Information Systems Auditors (CISAs) and IT assurance professionals with experience in the topic covered by the program.
All 10 programs are available as free downloads for ISACA members at www.isaca.org/assurance. Nonmembers can purchase electronic copies from the ISACA Bookstore (www.isaca.org/bookstore) for US $45 each. Additional audit programs are currently being updated and will be released later this year.
With more than 86,000 constituents in more than 160 countries, ISACA (www.isaca.org) is a recognized worldwide leader in IT governance, control, security and assurance. Founded in 1969, ISACA sponsors international conferences, publishes the ISACA Journal, and develops international information systems auditing and control standards. It also administers the CISA designation, earned by more than 60,000 professionals since 1978; the Certified Information Security Manager (CISM) designation, earned by more than 10,000 professionals since 2002; and the new Certified in the Governance of Enterprise IT (CGEIT) designation.