|
|
|
|
|
 |
ISACA Certification Early Exam Registration Deadline
The 11 December 2010 CISA, CISM and CGEIT early exam registration deadline has been extended to 27 August. Register for an exam by this deadline to save US $130. After this December administration, the next opportunity to sit for the CISA, CISM or CGEIT exam will be on 11 June 2011. |
|
|
|
|
 |
Microsoft Security and Audit Handbook 2010
ISACA MUMBAI CHAPTER, successfully collaborated with MICROSOFT in helping them to come out with the 2010 edition of MICROSOFT PLATFORM SECURITY AND AUDIT HANDBOOK 2010.
This handbook is an attempt to help the auditor and security community with possible internal technical controls which may be implemented with the latest Microsoft technology platform deployment.
A softcopy of the Handbook has been compiled for release and distribution to all the ISACA Members at the following link :-
www.microsoft.com/india/security
|
|
|
|
|
 |
Mobile Devices May Pose Greatest Threat to Confidential Information
ROLLING MEADOWS, Ill., USA (3 August 2010)—ISACA today released a white paper detailing how the increasing popularity of mobile devices poses a significant threat of leaking confidential enterprise information and intellectual property.
In the complimentary new white paper titled “Securing Mobile Devices,” ISACA, a leading global association for enterprise governance of information technology (IT), noted that the use of wireless networks, typically less secure than wired networks, leaves information at greater risk for interception. From smartphones to USB sticks, many devices also store data that are unencrypted, which can result in sensitive information being compromised through interception and device theft or loss. Mobile devices can also be the targets of malware attacks as employees carry them beyond the protection of their company’s network.
The white paper notes that a lack of enterprise control of physical devices, along with the growing practice of employees using personal devices for business, has increased mobile device risk levels.
More on www.isaca.org/mobiledevices |
|
|
|
|
 |
NEW OPPORTUNITY !!
Risk IT is a set of proven, real-world practices that helps organizations achieve their goals, seize opportunities and seek greater return with less risk. It allows enterprises to manage and capitalize on risk in the pursuit of their objectives. It extends COBIT, ISACA globally recognized IT governance framework, and saves time, cost and effort by providing organizations with a way to focus effectively on IT-related business risk areas, including risks related to late project delivery, compliance, obsolete IT architecture and IT service delivery problems. Members can download from www.isaca.org/riskit |
|
|
|
|
 |
|
|
|
|
|
|
|
|
 |
Val IT
is a governance
framework that |
|
|
consists of a set of guiding principles, and a number of processes conforming to those principles that are further defined as a set of key management practices.
|
| Val IT
addresses assumptions, costs, risks and outcomes related to a balanced portfolio of IT-enabled business investments. It also provides benchmarking capability and allows enterprises to exchange experiences on best practices for value management. |
|
|
|
|
|
|
 |
COBIT®
s an IT governance
framework and supporting toolset |
 |
|
that allows managers to bridge the gap between control requirements, technical issues and business risks. COBIT enables clear policy development and good practice for IT control throughout organizations. COBIT emphasizes regulatory compliance, helps organizations to increase the value attained from IT, enables alignment and simplifies implementation of the COBIT framework.
A complimentary PDF download of COBIT 4.1 is available for members only on the ISACA website
|
|
|
|
|
|
 |
K-NET
Global Information Repository (GIR), has been
|
 |
|
specifically developed to benefit members by all existing the burden of identifying and retrieving relevant and reliable information vital to keep pace with technological change. Through K-NET, pertinent knowledge has been sought, identified and peer reviewed, then organized into logical categories of interest and concern.
|
|
|
|
|
|
|
|
|
|
|
|