IT/IS White Papers | Insights & Expertise

White Paper

Digital Trust: A Modern-Day Imperative | Digital | English

Explore the elements of digital trust and how they underlie every digital transaction.

1 April 2022

White Paper

Using DTEF to Achieve Trustworthy AI

This white paper explores the benefits of using ISACA’s Digital Trust Ecosystem Framework (DTEF) for enterprises adopting artificial intelligence (AI)-enabled technologies and services.

30 April 2024

White Paper

Insights Into China’s Personal Information Protection Law | Digital | English

On 20 August 2021, the National People's Congress (NPC) passed the final version of the Personal Information Protection Law (PIPL) of the People’s Republic of China, a comprehensive privacy law that covers multiple facets of personal information protection.

10 May 2022

White Paper

The Promise and Peril of the AI Revolution: Managing Risk

The effort to establish and use emerging technology should not come at the expense of risk management.

12 September 2023

White Paper

Physical Penetration Testing

This white paper provides an overview of physical penetration testing and addresses the challenges associated with its implementation.

5 September 2023

White Paper

Eliminating Deceptive Privacy Practices: Building Trust by Addressing Privacy Dark Patterns

This white paper explores some common privacy dark patterns, strategies to address them and examines why dark patterns are so pervasive.

10 August 2023

White Paper

Blueprint for Ransomware Defense

The frequency, complexity, and effects of ransomware attacks continue to increase significantly worldwide. Cybercriminals have operationalized ransomware into a multibillion-dollar criminal enterprise, with the capability to exploit and disrupt even the largest and most sophisticated companies.

1 June 2023

White Paper

Incorporating Risk Management into Agile Projects

As enterprises transition to Agile delivery, they will need to rethink their control functions, including risk management, to keep pace with frequent release cycles.

13 February 2023

White Paper

Demystifying Linux | Digital | English

This paper explores what Linux is, how it works, and how practitioners can use it to their advantage. For those who are new to Linux, this paper’s intent is to provide a very basic overview of what Linux is, how it came to be, and how it can be used in your day-to-day activities.

9 November 2022

White Paper

5G Privacy: Addressing Risk and Threats | Digital | English

This paper reviews 5G network architecture and examines the privacy features of this technology, while providing an overview of existing and emerging privacy threats related to 5G.

2 November 2022

White Paper

Using Risk Tolerance to Support Enterprise Strategy | Digital | English

Effective enterprise risk management requires all stakeholders to understand and communicate risk terminology consistently.

24 October 2022

White Paper

Audit Practitioner’s Guide to Machine Learning, Part 1: Technology | Digital | English

In this two-part series, we provide an overview of machine learning (ML) and the current audit considerations, which focuses on compliance risk associated with ML.

20 October 2022

White Paper

Audit Practitioner’s Guide to Machine Learning, Part 2: Compliance Risk | Digital | English

In this two-part series, we provide an overview of machine learning (ML) and the current audit considerations, which focuses on compliance risk associated with ML.

20 October 2022

White Paper

The Great Resignation: Business Challenges and Sustainable Solutions | Digital | English

Learn what industry leaders are saying about current challenges enterprises are facing while pivoting their leadership to successfully navigate business change.

15 September 2022

White Paper

Defending Data Smartly | Digital | English

With the growing prevalence of digital banking, our collective financial and intellectual wealth and value have begun to transition to a digital model.

2 August 2022

White Paper

IT Audit Perspectives on Today’s Top Technology Risks | Digital | English

This white paper details the results of the ISACA/Protiviti global survey into the top technology risks as ranked by more than 7,500 IT auditors and professionals.

27 June 2022

White Paper

How to Drive Growth, Strategy and Governance Through Design | Digital | English

Design helps to answer core questions—for example, how a user may experience a product or service at a physical, emotional or visceral level.

13 June 2022

White Paper

Digital Trust A Modern Day Imperative

With cybersecurity, risk, data privacy, governance and ethics playing critical roles in the modern business landscape, becoming a digitally trustworthy enterprise is important for organizations to enhance reputations, their relationships and brand loyalty with customers. Download this free guide to learn why digital trust is so essential, and how you can play a key role in its pursuit.

1 April 2022

White Paper

Zero Trust: How to Beat Adversaries at Their Own Game | Digital | English

This white paper describes the Zero Trust principle and outlines benefits for securing enterprises of all sizes against cybersecurity threats.

1 March 2022

White Paper

How to Be a Leader People Don't Want to Leave

Insights from our ISACA experts on how to strengthen your leadership skill set to build a stronger team.

23 February 2022

White Paper

Governance Roundup - What Are You Doing About Environmental, Social and Governance Factors in Your Enterprise? | Digital | English

Learn about the importance of establishing an environmental, social and governance (ESG) framework and applying it to the daily operations of your enterprise.

31 January 2022

White Paper

Privacy in Practice 2022

Track the latest technical trends in data privacy and obtain inside info on how enterprises are following privacy by design with the Privacy in Practice 2022 report.

26 January 2022

White Paper

Destination: Agile Auditing | Digital | English

Audit practitioners who want to get the most out of Agile auditing practices will benefit from diving into the concepts and approaches outlined in this white paper.

10 December 2021

White Paper

AI Uses by Blue Teams Security | Digital | English

Machine learning (ML) and artificial intelligence (AI) are being used to better equip cybersecurity teams for emerging threats, but each has its limitations.

1 December 2021

White Paper

The Pulse: Emerging Technology 2021 | Digital | English

Gain the insights of IT practitioners, managers and leaders on emerging technology’s growing impact on business, information systems and beyond. ISACA®’s The Pulse: Emerging Technology 2021 white paper presents the results of the ISACA State of Emerging Technology survey, conducted in the fourth quarter of 2020.

3 November 2021

White Paper

Safeguarding the Future

Protect your organization and help your staff provide added value above and beyond the cost of certification.

28 October 2021

White Paper

Digital Operational Resilience in the EU Financial Sector: A Risk-Based Approach | Digital | English

The 2008 financial crisis was one of the most devastating and far-reaching global recessions in modern history. While the reforms that followed strengthened the resilience of the financial sector, they only indirectly addressed information and communications technology...

7 October 2021

White Paper

Ensuring Privacy Through Effective Data Management | Digital | English

Privacy is a fundamental human right and a critical component of every effective IT framework. But privacy cannot be achieved without proper data management, as data are at the core of all privacy initiatives. Without it, even the most sophisticated privacy programs can fail.

24 August 2021

White Paper

Assessing IoT | Digital | English

Internet of Things (IoT) advancements hold the potential for rapid innovation. When combined with machine learning and artificial intelligence, IoT creates a vast opportunity for innovators, with either positive or negative intentions.

1 August 2021

White Paper

A Holistic Approach to Mitigating Harm from Insider Threats | Digital | English

As the business world becomes increasingly digital and interconnected, all enterprises face a heightened risk of loss from potential threats. But contrary to popular belief, the most serious threats are not always external.

1 August 2021

White Paper

State of Cybersecurity 2021, Part 2: Threat Landscape, Security Operations and Cybersecurity Maturity | Digital | English

State of Cybersecurity 2021, Part 2: Threat Landscape, Security Operations and Cybersecurity Maturity reports the results of the annual ISACA® global State of Cybersecurity Survey, conducted in the fourth quarter of 2020. Part 2 focuses on the threat landscape, the impact of the COVID-19 pandemic on security programs and the challenges of assessing cybersecurity maturity. The survey findings reinforce past reporting and, in certain instances, mirror prior-year data, despite new challenges that enterprises face amidst the ongoing global pandemic and opportunistic threat actors.

27 July 2021

White Paper

Optimizing Risk Response | Digital | English

Risk is a part of everyday life, from transportation and travel to business and financial decisions. The digital world is no exception. While information and technology have driven innovation and created new opportunities for businesses worldwide, they are not without peril.

13 July 2021

White Paper

5 Ways to Improve the Quality Mindset of Your Organization

Explore how to begin your journey towards continuous improvement based on lessons learned from the Voluntary Improvement Program.

17 June 2021

White Paper

Using ITIL 4 and COBIT 2019 to Create An Integrated I&T Framework Environment | Digital | English

Expand your IT governance and asset management capabilities. Learn about ITIL and how it works together with COBIT in our latest publication: Using ITIL® 4 and COBIT® 2019 to Create an Integrated I&T Framework Environment.

11 June 2021

White Paper

Cyberrisk Quantification | Digital | English

One definition of risk is the likelihood of a particular event occurring factored against the real and opportunity costs associated with the event. But how does one determine the costs associated with an event such as a cyberattack?

12 May 2021

White Paper

State of Cybersecurity 2021, Part 1: Global Update on Workforce | Digital | English

Learn what cybersecurity experts, leaders and practitioners have to say about workforce development, staffing and cybersecurity budgets. Sponsored by HCL, ISACA®’s State of Cybersecurity 2021, Part 1 offers up answers from government officials, industry representatives and apprenticeship advocates surveyed in the fourth quarter of 2020 who point to continued workforce deficiencies, retention pain points and tightening budgets as problems that must be understood.

4 May 2021

White Paper

Blockchain Risk Considerations for Professionals | Digital | English

Blockchain is a uniquely structured database that houses information in blocks of predetermined storage capacity, which are then chained together once each block is filled. This creates an accurate chronological data record that is both easy to access and difficult to alter.

28 April 2021

White Paper

Case for Quality: Voluntary Manufacturing and Product Quality Pilot Program Results

FDA launched the Case for Quality (CfQ) in 2011 to elevate the focus of all medical device stakeholders from baseline regulatory compliance to sustained, predictive practices that advance medical device quality and safety to achieve better patient outcomes.

12 April 2021

White Paper

Cybersecurity Maturity: Gaps and Solutions

Focusing on risk-based capabilities is foundational to building resilience. Because there is no “one size fits all” approach, each security program must be suited to the appropriate business type and tailored to the unique risks they face.

1 March 2021

White Paper

5G Security: Addressing Risk and Threats of Mobile Network Technologies | Digital | English

5G Security: Addressing Risk and Threats of Mobile Network Technologies provides a brief history of cellular network technology from first-generation, voice-only systems through today’s voice/text/data 5G technology.

26 February 2021

White Paper

Privacy in Practice 2021 | Digital | English

Privacy in Practice 2021: Data Privacy Trends, Forecasts and Challenges presents a snapshot of the range of privacy issues dominating IS/IT leaders’ focus, from technical privacy controls to board of directors’ support. Despite economic uncertainty from the COVID-19 pandemic and perhaps because of it, privacy initiatives remain funded and prioritized.

26 January 2021

White Paper

Reporting Cybersecurity Risk to the Board of Directors | Digital | English

Cybersecurity professionals understand the importance of their function from a technological perspective certainly and most likely from a basic strategic and economic point-of-view as well.

16 December 2020

White Paper

IT Audits Perspectives on the Top Tech Risks 2021 | Digital | English

The most significant technology risks for 2021 reflect our COVID-19 world and its impact on business conditions and priorities. What’s increasingly apparent is that more digitally mature organizations have a clear advantage.

15 December 2020

White Paper

Blockchain Framework and Guidance | Digital | English

Blockchain and distributed ledger technologies are poised to take on applications across the breadth of the global digital economy. Trust in these systems is currently based only on the transparency of the ledger.

1 December 2020

White Paper

An ITAF Approach to IT Audit Advisory Services | Digital | English

With the fast pace of digital transformation, IT auditors may find themselves at a crossroads. Auditors are finding their roles within an enterprise shifting as they are asked to provide their expertise in an advisory or consultative capacity.

22 October 2020

White Paper

Managing Security Impacts in a Multicloud Environment | Digital | English

Many enterprises are now using multiple cloud services, which can in turn present information security challenges. Learn how to create a sound security strategy in our new white paper, Managing Security Impacts in a Multicloud Environment.

14 September 2020

White Paper

Implementing Robotic Process Automation (RPA) | Digital | English

As RPA gains more traction in industry, ISACA sought to understand practitioners’ awareness level, how widespread its adoption has been, implementation challenges, and its perceived benefits and pitfalls.

3 September 2020

White Paper

Privacy: Beyond Compliance | Digital | English

Privacy has been pushed into focus ever since the launch of the Internet, changing the way boards oversee compliance with privacy regulations.

5 August 2020

White Paper

Supply Chain Resilience and Continuity | Digital | English

With each major disaster we confront—including the current pandemic—business continuity management must continue to evolve. Learn how in our new white paper: Supply Chain Resilience and Continuity: Closing Gaps Exposed in a Global Pandemic.

18 June 2020

White Paper

State of Cybersecurity 2020 Part 2: Threat Landscape and Security Practices | Digital | English

State of Cybersecurity 2020 reports the results of the annual ISACA® global State of Cybersecurity Survey, conducted in the fourth quarter of 2019.

1 June 2020

White Paper

A Global Look at Privacy 2020: ISACA Research Report | Digital | English

Despite challenges in identifying and understanding their privacy obligations, organizations see the importance of data protection and compliance.

15 May 2020

White Paper

Achieving Data Security and Compliance | Digital | English

Over the past two decades, the relative costs of compute power and data storage have plummeted, and new technologies have simultaneously evolved to provide enterprises with the ability to manage, maintain and process data anywhere.

1 April 2020

White Paper

State of Cybersecurity 2020, Part 1: Workforce Efforts and Resources | Digital | English

State of Cybersecurity 2020 reports the results of the annual ISACA global State of Cybersecurity Survey, conducted in the fourth quarter of 2019.

24 February 2020

White Paper

Audit Oversight for Onboarding Vendors | Digital | English

It’s a reality of modern business that organizations need to outsource certain business activities to vendors. Without vendors, organizations would be left to fill gaps created by the need for specialized knowledge, the desire to increase revenue, or lower costs.

1 January 2020

White Paper

Conducting an IT Security Risk Assessment | Digital | English

Every enterprise faces risk—known and unknown—almost daily. Risk assessments help evaluate threats to technology and other enterprise assets in order to ensure a minimal degree of disruption and damage to the business.

1 January 2020

White Paper

Rethinking Data Governance and Management | Digital | English

Having a strong data governance and management program in place is key to the data transformation necessary to leverage big data, advanced analytics and more—the technologies that help maximize the potential value of your organization’s data.

1 January 2020

White Paper

State of Enterprise Risk Management 2020 | Digital | English

Today’s risk landscape is unprecedented in terms of complexity. Get the latest insights from ISACA, CMMI Institute and Infosecurity on the most critical types of risk facing organizations today and how they respond to emerging threats.

1 January 2020

White Paper

A Global Look at IT Audit Best Practices | Digital | English

In this report, ISACA and Protiviti present the results of their global research and offer commentary on these and other notable industry trends.

1 October 2019

White Paper

Bridging the Digital Risk Gap | Digital | English

As the pace of change in enterprise technology increases, so do the risks. This situation requires increasing collaboration between risk management and information technology professionals to ensure the value of technological investments is maximized.

1 September 2019

White Paper

Managing Third-Party Risk | Digital | English

Today, almost every enterprise relies on third-party vendors to help facilitate the creation and delivery of products and services.

1 August 2019

White Paper

2019 NACACS Security Leaders Summit Recap | Digital | English

Each year, a select group of security leaders is invited to discuss challenges and share best practices at ISACA’s IT Security Leaders Summits, the first of which in 2019 took place at the North American CACS conference in Anaheim, California.

1 June 2019

White Paper

State of Cybersecurity 2019, Part 2: Current Trends in Attacks | Digital | English

For five years, ISACA has talked to cybersecurity leaders across the globe to discuss what they’re seeing and experiencing when it comes to hiring, budgets, threat landscape and more.

4 June 2019

White Paper

2019 North America CACS IT Audit Leaders Summit Recap | Digital | English

Each year, a select group of IT audit leaders is invited to discuss challenges and share best practices at ISACA’s IT Audit Leaders Summits, the first of which in 2019 took place at the North American CACS conference in Anaheim, California.

1 June 2019

White Paper

Continuous Oversight in the Cloud | Digital | English

The rapid pace of technological change, combined with an ever-changing regulatory environment, creates challenging situations for governance and assurance professionals—and these challenges have grown exponentially with the mass adoption of cloud technology.

1 May 2019

White Paper

State of Cybersecurity 2019, Part 1: Current Trends in Workforce Development | Digital | English

For five years, ISACA has talked to cybersecurity leaders across the globe to discuss what they’re seeing and experiencing when it comes to hiring, budgets, threat landscape and more.

9 March 2019

White Paper

Improving Security Awareness Using Marketing Techniques | Digital | English

Enterprises spend large amount of time and money on information security training and awareness for employees to drive various positive outcomes: better threat responses, reduced risky behavior, and increased regulatory compliance.

1 March 2019

White Paper

Phishing Defense and Governance | Digital | English

Phishing and email-borne attacks more than doubled from 2017 to 2018, and global financial losses from these attacks exceeded $12 billion over an 18-month period, according to law enforcement statistics.

1 March 2019

White Paper

2018 IT Security Leaders Summit Recap | Digital | English

Every year, a select group of security leaders is invited to discuss challenges and share best practices at ISACA’s IT Security Leaders Summits (formerly known as the CISO Forums) in North America and Europe.

1 February 2019

White Paper

The Future of IT Audit | Digital | English

Since 1969, ISACA has helped auditors navigate the technology shifts impacting the profession. In its 50th anniversary year, ISACA has conducted a global survey of more than 4,000 auditors to take their pulse on the changes impacting their roles, their career paths and their organizations.

1 February 2019

White Paper

Enforcing Data Privacy in the New Digital World | Digital | English

The modern enterprise is awash in data—from customers, vendors and employees, from transactions, research and investigations. And the amount of data is increasing rapidly as emerging technologies take hold—such as robotics, Internet of Things (IoT) and artificial intelligence (AI).

1 January 2019

White Paper

Governance Playbook: Integrating Frameworks to Tackle Cybersecurity | Digital | English

No enterprise—regardless of its industry, type, size, or geographic location—is exempt from cyberthreats. As the need to move information in today’s economy is vital to success, we have to recognize that cybersecurity is no longer simply an IT issue and consider it in the larger picture of enterprise governance.

1 January 2019

White Paper

Auditing Artificial Intelligence | Digital | English

Predictions regarding the potential impact of artificial intelligence (AI) technologies on the business community vary from significant to earth-shattering, depending on who you ask and the industry affected.

1 December 2018

White Paper

How to Audit GDPR | Digital | English

The General Data Protection Regulation (GDPR) went into effect on 25 May 2018, and the implications of this new data protection requirement are still being discussed and interpreted at enterprises in the EU and around the world.

1 October 2018

White Paper

2018 IT Audit Leaders Summit Recap | Digital | English

Annually, at ISACA’s CACS Conferences in North America and Europe, a select group of senior-level IT audit professionals, from directors to vice presidents to chief audit executives (CAEs), are invited to share solutions to challenges confronting the audit profession.

1 August 2018

White Paper

Auditing and Knowledge Management | Digital | English

Audit program results are only as reliable as the inputs and information that go into them.

1 June 2018

White Paper

Continuous Assurance Using Data Threat Modeling | Digital | English

Business professionals and IT practitioners agree that data are a valuable commodity for enterprises in many ways. The notion of using data to help monitor and manage risk tolerances in audit and assurance activities is often overlooked.

1 June 2018

White Paper

State of Cybersecurity 2018, Part 2: Threat Landscape | Digital | English

For the fourth year in a row, ISACA has surveyed security leaders worldwide to determine their insights and experiences with key cybersecurity issues, ranging from workforce challenges and opportunities to the emerging threat landscape.

1 June 2018

White Paper

ISACA Tech Brief: The Darknet | Digital | English

The Darknet is a portion of the Internet that more and more people have heard about, but very few have visited. There’s a reason for that—the darknet, the people who use it anonymously, and the activities that take place there don’t want to be uncovered, except by others who also wish to engage in those hidden activities.

1 June 2018

White Paper

Transport Layer Security | Digital | English

A core capability of the modern Internet is the global transmission of digital information. Successful and secure transmission requires numerous technical standards and protocols, all functioning in harmony.

1 June 2018

White Paper

ISACA Tech Brief: 3D Printing | Digital | English

The technology behind 3D printing has been in use since the 1990s, but recent advancements lowering costs and improving outputs have pushed their usage into the mainstream of manufacturing.

1 May 2018

White Paper

A Risk-Aware Path to Cybersecurity Resilience and Maturity | Digital | English

Cybersecurity is typically approached, analyzed and managed from a functional point of view. Enterprises typically spend considerable time and resources analyzing their security programs—and by extension the countermeasures comprising them—through the lens of scope and function.

1 April 2018

White Paper

State of Cybersecurity 2018, Part 1: Workforce Development | Digital | English

For the fourth year in a row, ISACA has surveyed security leaders worldwide to determine their insights and experiences with key cybersecurity issues, ranging from workforce challenges and opportunities to the emerging threat landscape.

1 April 2018

White Paper

ISACA Tech Brief: Networked Biomedical Device Security | Digital | English

ew professions are as technology-enabled as healthcare, and with each passing year more digital tools proliferate.

1 March 2018

White Paper

Reasonable Software Security Engineering | Digital | English

Adam Shostack—a security consultant, enterprenuer, technologist, author and game designer—currently serves as a member of BlackHat’s Review Board and helped found Common Vulnerabilities and Exposures.

1 March 2018

White Paper

ISACA Tech Brief: Cloud Access Security Brokers | Digital | English

While cloud computing has actually been in use by enterprises for decades, the popularity of these services has skyrocketed in recent years.

1 February 2018

White Paper

Maintaining Data Protection and Privacy Beyond GDPR Implementation | Digital | English

The EU’s General Data Protection Regulation (GDPR) becomes applicable and enforceable on 25 May 2018. Any enterprise that collects data on individuals in the EU must institute specific privacy protections for that information or face regulatory penalties for violations.

1 February 2018

White Paper

The Vaguely Defined Perimeter | Digital | English

Marcus Ranum, a pioneer in security technology, is considered a world-renowned expert on security system design and implementation.

1 February 2018

White Paper

Threat Pattern Life Cycle Development | Digital | English

Security professionals seeking to thwart the next threat to their IT systems might benefit from a better understanding of the software development life cycle approach.

1 December 2017

White Paper

ISACA Tech Brief: Understanding Smart Contracts | Digital | English

Blockchain technology is getting increased attention these days because of the current popularity of Bitcoin. However, this important technological advancement is driving innovation in many other ways beyond cryptocurrency.

1 December 2017

White Paper

Cybercrime: Defending Your Enterprise | Digital | English

Advances in the digital marketplace are creating more opportunities for value—and risk. As organizations leverage cloud computing, the Internet of Things, mobile computing and social media, digital risk management takes on greater importance.

1 November 2017

White Paper

DevOps: Process Maturity By Example | Digital | English

DevOps represents a major paradigm shift in how enterprises author software.

1 November 2017

White Paper

How Enterprises Are Calculating Cloud ROI | Digital | English

Considering a major change to your IT operations? If so, your enterprise likely will calculate anticipated return on investment (ROI) as part of the consideration process.

1 November 2017

White Paper

Vulnerability Assessment | Digital | English

Enterprises are always on the lookout for security vulnerabilities—weaknesses that could be exploited by threat sources. A key tool for understanding the true nature of a potential weakness is a vulnerability assessment.

1 November 2017

White Paper

ISACA Tech Brief: Virtual Reality and Augmented Reality | Digital | English

Virtual and augmented realities are often lumped together in discussions, often for convenience, but they are not the same. Virtual reality (VR) is a replacement for reality using computer-generated simulations; augmented reality (AR) does not replace reality, but embellishes it with computer-generated enhancements.

1 November 2017

White Paper

Getting Started with Data Governance Using COBIT 5 | Digital | English

Most enterprises have some form of risk management. However, it may be driven primarily by compliance needs and emerging threats, making it a reactive function instead of a proactive one.

1 October 2017

White Paper

Getting Started With Risk Management | Digital | English

Most enterprises have some form of risk management. However, it may be driven primarily by compliance needs and emerging threats, making it a reactive function instead of a proactive one.

1 October 2017

White Paper

Shadow IT Primer | Digital | English

The use of shadow IT—technology used by employees but not approved/implemented by the enterprise—is becoming the new normal, according to recent surveys.

1 October 2017

White Paper

ISACA Tech Brief: Threat Intelligence | Digital | English

Security of applications, services and information has become an essential part of our daily lives, for both individuals and their enterprises.

1 October 2017

White Paper

GDPR Data Protection Impact Assessments | Digital | English

By now you are surely aware of the European Union General Data Protection Regulation (GDPR) that goes into effect on 25 May 2018.

1 September 2017

White Paper

SSH: Practitioner Considerations | Digital | English

Every organization’s technology footprint is different—no two enterprise situations are identical. But one of the few technology products in use by nearly every enterprise is Secure Shell (SSH).

1 September 2017

White Paper

Assessing Cryptographic Systems | Digital | English

The role of an auditor is rarely easy, but few areas of technology review and assessment are as challenging or more important as auditing cryptographic systems and components.

1 August 2017

White Paper

Adopting GDPR Using COBIT 5 | Digital | English

The clock is ticking on the May 2018 deadline for compliance with the European Union’s General Data Protection Regulation (GDPR).

1 August 2017

White Paper

GEIT for Health Care | Digital | English

Heath care is one of the most complex and regulated business sectors in the world. In addition, the rapid pace of change in the sector makes it one of the most dependent on information technology.

1 August 2017

White Paper

IT Audit Leaders Forum Recap | Digital | English

Every year, at ISACA’s CACS Conferences in North America and Europe, IT audit leaders from various enterprises and industries gather to discuss issues and solutions to challenges confronting the audit profession.

1 August 2017

White Paper

ISACA Tech Brief: Understanding Artificial Intelligence | Digital | English

Organizations are great at collecting data. They are often less proficient at making informed business decisions from the data they collect.

1 July 2017

White Paper

Polyverse Case Study | Digital | English

Security breaches continue to rise around the globe. Polyverse was created on the premise of helping enterprises reduce attacker dwell time within their networks and systems.

1 June 2017

White Paper

ISACA Tech Brief: Blockchain Basics | Digital | English

Advances in blockchain technology offer incredible opportunities for innovation by streamlining digital transactions. Recent tech media coverage promises revolutionary developments for many industries, changing the way commerce is transacted and records are kept

1 April 2017

White Paper

CISO Board Briefing 2017 | Digital | English

This CISO Board Briefing presents to enterprise boards and executives high-level summaries of topics covered at the ISACA CISO Forums.

1 April 2017

White Paper

Auditing Cyber Security | Digital | English

Cyber security has become a prevalent issue facing most organizations—one that companies recognize as an enterprise-wide issue requiring thoughtful attention.

1 February 2017

White Paper

Rise of the Drones | Digital | English

The commercial use of drone technology is becoming increasingly mainstream in a number of enterprises. As such, the regulatory environment surrounding drone usage has evolved rapidly to keep pace with the technologies being used.

1 February 2017

White Paper

ISACA Tech Brief: Blockchain Basics | Digital | English

Advances in blockchain technology offer incredible opportunities for innovation by streamlining digital transactions.

1 January 2017

White Paper

Adopting GDPR Using COBIT 5 | Digital | Japanese

The clock is ticking on the May 2018 deadline for compliance with the European Union’s General Data Protection Regulation (GDPR). For any enterprise in the world that conducts business with at least one citizen of the EU, that enterprise must comply with GDPR protections of personally identifiable information ... or face stiff penalties.

1 January 2017

White Paper

Incident Response: Obfuscated JavaScript and Evil Adware Recognition | Digital | English

Every day, with code and skills, attackers assault web servers in attempts to redirect users to malicious content. By leveraging the server web pages, nefarious actors perform several types of unsolicited actions against unsuspecting users, such as the theft of personal or financial information.

1 November 2016

White Paper

Insights From the 2016 IT Audit Directors Forums | Digital | English

During the 2016 North America and European CACS annual conferences, ISACA hosted invitation-only forums.

1 October 2016

White Paper

Firmware Security Risks and Mitigation | Digital | English

In 2016, reports of ransomware, Internet of Things (IoT) attacks and increased cyber espionage have dominated headlines.

1 October 2016

White Paper

Understanding the Enterprise Advantages of Application Containerization | Digital | English

Enterprises are rapidly adopting application containers—and the reason is clear. Application containers are transforming these enterprises all over the world.

1 October 2016

White Paper

Alexa, Can You Hear Me? Demystifying the Amazon Echo | Digital | English

Complex software applications, networking protocols, authentication mechanisms, session management, data handling, data warehousing and mobile device interaction underpin the Amazon® EchoTM (Echo) and all the services it provides.

1 September 2016

White Paper

Is Mobile the Winner in Payment Security? | Digital | English

Information systems security professionals are looking cautiously at recent innovations in mobile payments, due to massive data breaches of payment card data and the ever-increasing number of identity theft crimes.

1 July 2016

White Paper

Internal Control Using COBIT 5 | Digital | English

Internal controls are often not well understood in business. Contrary to some misinformed opinions, internal controls are not onerous rules that exist to make work cumbersome or more difficult.

1 March 2016

White Paper

Understanding the Enterprise Advantages of Application Containerization: Practitioner Considerations | Digital | English

Enterprises are rapidly adopting application containers—and the reason is clear. Application containers are transforming these enterprises all over the world.

1 January 2016

White Paper

Keeping a Lock on Privacy: How Enterprises Are Managing Their Privacy Function | Digital | English

Announcements of major privacy breaches involving thousands, even millions, of data records are becoming common print and Internet headlines.

1 September 2015

White Paper

The Cyberresilient Enterprise: What the Board of Directors Needs to Ask | Digital | English

Advances in the digital marketplace are creating more opportunities for value—and risk. As organizations leverage cloud computing, the Internet of Things, mobile computing and social media, digital risk management takes on greater importance.

1 August 2015

White Paper

Benchmarking and Business Value Assessment of COBIT 5 | Digital | English

This report presents the results of an international research project commissioned by ISACA to the University of Antwerp—Antwerp Management School (Belgium), focused on establishing an international benchmark and a business value assessment of COBIT 5.

1 July 2015

White Paper

Cloud Computing Market Maturity | Digital | English

Due to its exponential growth, cloud computing can no longer be considered an emerging technology, but neither is it (yet) a mature and stable technology.

1 July 2015

White Paper

Why Cloud Computing Should be Part of Business Strategy | Digital | English

Cloud computing continues as a leading business trend driving business strategy, ranking third in our Top 10 Technology Trends assessment.

1 June 2015

White Paper

Innovation Insights | Digital | English

It is clear that digital technologies will remain a major driver of business innovation for the foreseeable future.

1 June 2015

White Paper

Machine Learning Drives Big Business Benefits | Digital | English

Machine learning is one of the top value-producing digital innovation trends, ranking fourth in our Top 10 Technology Trends assessment. Machine learning, which includes predictive analytics, covers cognitive systems that go beyond Big Data Analytics.

1 June 2015

White Paper

Why the Value of Big Data Analytics Continues to be a Big Deal | Digital | English

Big data analytics is the leading value-producing digital innovation trend, according to our Top 10 Technology Trends assessment. With digital data sources growing in number and complexity, big data continues to get bigger. To make big data actionable takes analytics.

1 June 2015

White Paper

Industrial Control Systems: A Primer for the Rest of Us | Digital | English

The current landscape for industrial control systems’ (ICS) cybersecurity is best described as turbulent, as system owners struggle to protect systems that were never intended to be interconnected.

1 March 2015

White Paper

Overview of Digital Forensics | Digital | English

Cyber incidents are fast moving and increasing in number and severity. When a cyber incident occurs, the attacked enterprise responds with a set of predetermined actions.

1 March 2015

White Paper

Information Systems Auditing: Tools and Techniques

The purpose of this guidance is to assist enterprises in preparing a comprehensible, well-supported audit report that complies with the requirements of the information systems (IS) Audit and Assurance Standards and IS Audit and Assurance Guidelines that are published by ISACA.

1 February 2015

White Paper

Internet of Things: Risk and Value Considerations | Digital | English

The Internet of Things (IoT) revolution has the potential to be staggeringly transformational and, at the same time, highly disruptive to business. Business value and organizational competitiveness can be derived as enterprises capitalize on these new capabilities to gain more and better business value from IoT devices.

1 January 2015

White Paper

Cybersecurity: What the Board of Directors Needs to Ask | Digital | English

This joint project from ISACA and The Institute of Internal Auditors Research Foundation offers guidance to board members on the questions they should be asking regarding cybersecurity in their organizations.

1 August 2014

White Paper

European Cybersecurity Implementation: Assurance | Digital | English

Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare. Factors contributing to the need for improved cybersecurity include: ubiquitous broadband, IT-centric business and society, and social stratification of IT skills.

1 August 2014

White Paper

European Cybersecurity Implementation: Overview | Digital | English

Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare.

1 August 2014

White Paper

European Cybersecurity Implementation: Resilience | Digital | English

Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare.

1 August 2014

White Paper

European Cybersecurity Implementation: Risk Guidance | Digital | English

Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare.

1 August 2014

White Paper

COBIT 5 Principles: Where Did They Come From? | Digital | English

Governance and management of enterprise information and related technology (GEIT) is ultimately the board of directors’ (or other governing entity’s) responsibility.

1 July 2014

White Paper

Relating the COSO Internal Control—Integrated Framework & COBIT | Digital | English

This white paper takes the refreshed and updated COSO Internal Control—Integrated Framework (the COSO framework) as its base structure and examines how the relevant components and content of the COBIT 5 framework and its supporting guidance deliverables relate to the COSO framework.

1 March 2014

White Paper

Generating Value From Big Data Analytics | Digital | English

Many enterprises are moving quickly to adopt “big data analytics”—specifically, the application of advances in analytics techniques to the rapidly-expanding pool of information that enterprises have at their disposal to enable better decision making.

1 January 2014

White Paper

Information Systems Auditing Tools and Techniques—Creating Audit Programs | Digital | English

Audits are important tools for organizations. A thoroughly conducted audit program can assure organizational stakeholders of the financial, operational and ethical well-being of an organization.

1 January 2014

White Paper

Security As A Service | Digital | English

Enterprises need to protect their assets, but they also need to be profitable to stay in business. Protecting information assets has become a priority for enterprises that need to meet compliance requirements or need to protect sensitive data.

1 December 2013

White Paper

Privacy and Big Data | Digital | English

Improved decision making, faster time to market, better customer service and increased profits are just some of the benefits contributing to the explosion of big data implementation across enterprises of all sizes.

1 August 2013

White Paper

Cloud Governance: Questions Boards of Directors Need to Ask | Digital | English

Cloud computing is gaining momentum. As cloud offerings gain maturity, cloud service providers are becoming more competitive. Some providers are reducing prices as they realize investments and leverage economies of scale.

1 April 2013

White Paper

Big Data: Impacts and Benefits | Digital | English

Experienced business and IT professionals know that optimizing their use of big data as a resource will deliver real business value to the enterprise stakeholders.

1 January 2013

White Paper

Business Continuity Management: Emerging Trends | Digital | English

As the pace of change in information technology accelerates, business continuity management (BCM) continues to evolve rapidly within enterprises to meet increased market and regulatory demands.

1 December 2012

White Paper

2012 Cloud Computing Market Maturity Study Results | Digital | English

The maturity of a product or service offering changes over time, advancing from infancy through levels of maturity before eventually reaching a plateau and decline.

1 September 2012

White Paper

Calculating Cloud ROI: From the Customer Perspective | Digital | English

Marketing hype claims that cloud computing can help any enterprise meet most IT service needs at a lower total cost of ownership (TCO) and higher return on investment (ROI).

1 July 2012

White Paper

Virtualization Desktop Infrastructure (VDI) | Digital | English

The concept of virtualization has rapidly transformed data centers over the past few years. Beginning with the virtualization of servers, virtualization has facilitated the consolidation of resources, improved resource utilization, enabled improved disaster recovery solutions, reduced capital costs and increased sustainability.

1 May 2012

White Paper

Incident Management and Response | Digital | English

Incident response is a key component of an enterprise business continuity and resilience program. The increasing number and diversity of information security threats can disrupt enterprise business activities and damage enterprise information assets.

1 March 2012

White Paper

Guiding Principles for Cloud Computing Adoption and Use | Digital | English

The drive for value, the need to reduce technology costs and the business demand for increased agility in how technology is used have caused enterprises to adopt cloud computing strategies.

1 February 2012

White Paper

Mobile Payments: Risk, Security and Assurance Issues | Digital | English

Mobile payments as a financial transaction medium emerged around a decade ago. Adoption was slow due to the nature of the mobile technology supporting the concept.

1 November 2011

White Paper

Web Application Security: Business and Risk Considerations | Digital | English

The use of web applications in the enterprise has grown exponentially in the last decade.

1 October 2011

White Paper

Data Analytics A Practical Approach | Digital | English

More than ever we live in a world of data and rules—business, human, environmental. The use of daily, weekly and monthly analytical monitoring to determine patterns in business data is common: Identifying what we are doing well,

1 August 2011

White Paper

The Merging of Security and Operational Technology | Digital | English

As industrial control systems (ICS) cybersecurity breaches continue to increase, the consequences arising from inadequate protection of information have become an important executive management issue. It follows, then, that the convergence of information technology (IT) and operational technology (OT) has become a business imperative.

1 June 2011

White Paper

Leveraging XBRL for Value in Organizations | Digital | English

ISACA and IFAC have jointly developed this white paper to provide accounting and assurance professionals with guidance to leverage value from XBRL initiatives and compliance requirements.

1 June 2011

White Paper

Sustainability | Digital | English

Now, more than ever, enterprises seek ways to reduce costs to help maintain profits. IT offers a suitable target for sustainability and “green” efforts—efforts that can pay off in ways other than financial by creating a reputation for corporate social responsibility and providing a differentiator in the competition to attract employee talent.

1 April 2011

White Paper

Electronic Discovery | Digital | English

Every year, enterprises collect, process and accumulate a massive amount of data from a variety of internal and external sources. The data constitute both an asset (for decision making) and a risk (in e-discovery).

1 February 2011

White Paper

Security Information and Event Management: Business Benefits | Digital | English

In today’s information-driven business environment, enterprise systems and processes capture an ever-increasing amount of data.

1 December 2010

White Paper

E-Commerce and Consumer Retailing: Risks and Benefits | Digital | English

ISACA recently unveiled the results of its 2010 survey Shopping on the Job: Online Holiday Shopping and Workplace Internet Safety.

1 November 2010

White Paper

Virtualization: Benefits and Challenges | Digital | English

Virtualization is a high-tech buzzword in broad use today, but its increasing importance is based on more than just the passing fancy of the crowd. With its potential to reduce capital expenses and energy costs, virtualization presents an attractive solution for enterprises looking to save money and generate value from their IT investments.

1 October 2010

White Paper

Data Leak Prevention | Digital | English

Data leak prevention (DLP) is a suite of technologies aimed at stemming the loss of sensitive information that occurs in enterprises across the globe.

1 September 2010

White Paper

New Service Auditor Standard: A User Entity Perspective | Digital | English

The International Auditing and Assurance Standards Board (IAASB) and the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA) have recently approved new standards for reporting on controls at a service organization with a truly global constituency in mind.

1 July 2010

White Paper

Securing Mobile Devices | Digital | English

Mobile computing devices have become a critical tool in today’s networked world. Enterprises and individuals alike rely on mobile devices to remain reachable when away from the office or home.

1 July 2010

White Paper

Social Media: Business Benefits and Security, Governance & Assurance Perspectives | Digital | English

Initiated as a consumer-oriented technology, social media is increasingly being leveraged as a powerful, low-cost tool for enterprises to drive business objectives such as enhanced customer interaction, greater brand recognition and more effective employee recruitment.

1 May 2010

White Paper

Cloud Computing: Business Benefits and Security, Governance & Assurance Perspectives | Digital | English

Cloud computing is an emerging technology that may help enterprises meet the increased requirements of lower total cost of ownership (TCO), higher return on investment (ROI), increased efficiency, dynamic provisioning and utility-like pay-as-you-go services

1 January 2009

White Paper

Digital Trust: A Modern-Day Imperative | Digital | Japanese

現代のビジネス環境では、サイバーセキュリティ、リスク、データプライバシー、ガバナンス、倫理が重要な役割を果たしており、事業体が評判や顧客との関係はもちろん、顧客からのブランドロイヤルティを強化するためには、デジタル世界で信頼できる事業体になることが重要です。

6 August 2022

White Paper

Governance Roundup - What Are You Doing About Environmental, Social & Governance Practices? | Digital | French

Découvrez l'importance d'établir un cadre environnemental, social et de gouvernance (ESG) et de l'appliquer aux opérations quotidiennes de votre entreprise.

19 September 2022

White Paper

Digital Trust: A Modern-Day Imperative | Digital | Spanish

Dado que la ciberseguridad, el riesgo, la privacidad de los datos, el gobierno y la ética desempeñan papeles fundamentales en el panorama empresarial moderno, convertirse en una empresa digitalmente fiable es importante...

1 September 2022

White Paper

Digital Trust: A Modern-Day Imperative | Digital | Chinese

在现代商业环境中，网络安全、风险、数据隐私、监管和道德发挥着重要作用，企业要想提高声誉并且加强同客户的关系及品牌忠诚度，成为在数字领域值得信赖的企业是关键所在。

26 August 2022

White Paper

Cyberrisk Quantification | Digital | Brazilian Portuguese

Podemos considerar como uma definição de risco a probabilidade de um determinado evento ocorrer, levando em consideração os custos reais e de oportunidade associados a esse evento.

25 August 2022

White Paper

Insights Into China’s Personal Information Protection Law | Digital | Chinese

2021 年 8 月 20 日，全国人民代表大会 (NPC) 通过了《中华人民共和国个人信息保护法》(PIPL)。这部综合性法律涵盖个人信息保护的多个方面。

19 August 2022

Zero Trust: How to Beat Adversaries at Their Own Game | Digital | Spanish

Este documento técnico describe el principio de confianza cero y los beneficios para proteger a las empresas de cualquier tamaño contra las amenazas de ciberseguridad.

16 August 2022

White Paper

Cyberrisk Quantification | Digital | Spanish

Una definición de riesgo es la probabilidad de que ocurra un evento en particular frente a los costos reales y de oportunidad asociados con el evento. Pero, ¿cómo se determinan los costos asociados con un evento como un ciberataque?

3 August 2022

White Paper

VPN Security Audit Program | Digital | Spanish

Se confía en las redes privadas virtuales (VPN) para brindar a los trabajadores remotos acceso seguro a la red corporativa. A medida que aumenta la cantidad de trabajadores remotos y la duración del trabajo remoto (desde que el trabajo remoto es temporal hasta potencialmente permanente), ha aumentado la concienciación sobre las VPN.

6 August 2022

White Paper

State of Cybersecurity 2022 | Digital | Chinese

《2022年网络安全状况：劳动力缺口、资源和网络运营的全球近况》白皮书报告了一项已经连续开展第八年的年度全球调研活动的成果，主要关注以下问题

15 June 2022

White Paper

COBIT 5 | Digital | Spanish

COBIT 5 es el marco general que engloba negocio y gestión para el gobierno y la gestión de las TI de la empresa. Este volumen documenta los 5 principios de COBIT 5 y define los 7 catalizadores de apoyo que forman el marco.

White Paper

ITAF Companion Performance Guidelines 2208 | Digital | Japanese

ISACAは、IT監査フレームワーク（ITAF™）の手引きとして、IT監査サンプリングガイドライン（ガイドライン2208）を作成しました。これらのガイドラインの目的は、監査サンプルの設計と選択およびサンプル結果の評価において、IT監査や保証の実務者にガイダンスを提供することです。適切なサンプリングと評価は、十分かつ適切な証拠の要件を達成することを支援します。

White Paper

ITAF Companion Performance Guidelines 2208 | Digital | Chinese

ISACA在创建信息技术审计框架（ITAF™）的同时也创建了《信息技术审计抽样指南（准则2208）》。这些准则的目的在于为IT审计和鉴证从业人员提供设计和选择审计样本并评估样本结果的指南。适当的抽样和评估有助于满足充分和适当证据所需的要求。

White Paper

COBIT 5 | Digital | Hebrew

תיאור אנא שימו לב: COBIT 5 זמין גם כמסמך PDF להורדה ללא תשלום הן עבור חברים ב- ISACA והן

White Paper

Blockchain Framework and Guidance | Digital | Chinese

区块链和分布式账本技术蓄势待发，将在全球数字经济中掀起应用热潮。目前对这些系统的信任仅依赖账本的透明度。

White Paper

ITAF™ Companion Performance Guidelines 2208 | Digital | Korean

ISACA는 정보 기술 감사 프레임워크(ITAF™)의 동반자로서 정보 기술 감사 샘플링 지침(Guideline 2208)을 재정했습니다. 이 지침의 목적은 감사 샘플을 설계 및 선택하고 샘플 결과를 평가하는 데 있어, IT 감사 및 보증 실무자에게 지침을 제공하는 것입니다. 적절한 샘플링 및 평가를 통해 충분하고 적절한 근거로서의 요건을 달성하는 데 도움이 될 것입니다.

IT 감사 및 보증 실무자는 감사 절차가 해당 모집단의 100% 미만에 적용되나 총 모집단에 대한 결론을 내릴 때 이러한 지침을 고려해야 합니다.

White Paper

Cloud Governance: Questions Boards of Directors Need to Ask | Digital | Polish

Cloud computing is gaining momentum. As cloud offerings gain maturity, cloud service providers are becoming more competitive. Some providers are reducing prices as they realize investments and leverage economies of scale.

White Paper

COBIT 5 | Digital | Chinese

说明请注意：COBIT 5亦以PDF下载方式免费提供给ISACA 会员及非会员人士。 COBIT 5是一个全面性的、以支持企业实现其IT治理和管理目标之业务及管理的框架。本书阐述构成此框架的五个基本原则及定义的七种配套动力。

White Paper

COBIT 2019 Framework: Introduction & Methodology | Digital | Turkish

Bu dijital dönüşüm çağında, kuruluşlar yenilikçiliği, büyümeyi ve sürdürülebilirliği teşvik eden bilgi ve teknoloji (B&T) varlıklarına her zamankinden daha fazla bağımlıdır. Sonuç olarak bilgi ve teknolojinin kurumsal yönetişimi (EGIT), yürütme liderliği yoluyla yönetişim kurullarından iş ve BT yöneticilerine verilen stratejik kararlar konusunda rehberlik ederek daha fazla önem kazanmıştır.

White Paper

COBIT 2019 Framework: Introduction & Methodology | Digital | Chinese

COBIT 2019 框架：简介和方法近年来，业界开发和推广了多种最佳实践框架，来协助完成企业 IT 治理 (EGIT) 的理解、设计和实施过程。COBIT 2019 集该领域内超过 25 年的开发成果之大成，不仅融入了新的科学见解，还将这些见解付诸于实践。

White Paper

COBIT 2019 Framework: Governance & Management Objectives | Digital | Turkish

COBIT, kurumun tamamına yönelik, kurumsal bilgi ve teknolojinin yönetimi ve yönetişimi için tasarlanmış bir çerçevedir. Kurumsal B&T, kurumun hangi birimi tarafından yerine getirildiğinden bağımsız olarak kurum içerisinde hedeflere ulaşmak için gerçekleştirilen teknoloji ve bilgi işleme faaliyetlerini ifade eder. Başka bir deyişle, kurumsal B&T, BT ile sınırlandırılmamakta ama kesinlikle BT birimlerini içermektedir.

Book

COBIT 2019 Framework: Governance & Management Objectives | Digital | Chinese

COBIT 2019 框架：治理和管理目标 COBIT 是面向整个企业的企业信息和技术治理及管理框架。企业 I&T 是指企业为实现其目标而在任何领域实施的所有技术和信息处理。换句话说，企业 I&T 包括但不仅限于组织的 IT 部门。本出版物《COBIT 2019 框架：治理和管理目标》包含了对 COBIT 核心模型及其 40 个治理和管理目标的详细描述。描述了每个目标及其目的、与企业目标和一致性目标的关联，以及指标示例

PDF

COBIT 5 | Digital | Turkish

COBIT 5, kurumsal BT yönetisim ve yönetimi için çok önemli bir is ve yönetim çerçevesidir. Bu cilt bes COBIT 5 ilkesini belgelendirmekte ve çerçeveyi olusturan 7 destekleyici gerçeklestiricilerini tanimlamaktadir.

White Paper

ITAF, 4th Edition | Digital | Chinese

获取使审计保持一致性和有效性的指导和技术。 ITAF第四版概述了与审计过程（风险评估、计划和现场工作）的顺序一致的标准和最佳实践，指导对企业运营效率和合规性的评估。ITAF可作为IT审计和鉴证业务需要遵循的强制性标准和建议的最佳实践参考。

1 February 2021

White Paper

Privacy - Beyond Compliance | Digital | Chinese

从互联网诞生至今，隐私就一直成为我们关注的焦点，随着隐私保护的法律法规的推出，董事会对合规的管理方法发生了改变。本白皮书探究了隐私的人为因素，着重阐述了数据不仅仅是一项被利用的资产，更是需要待之以尊严和尊重的个人数据。重新审视您对待隐私的看法，建立超乎合规的隐私方案，从中获得价值。

White Paper

Rethinking Data Governance and Management | Digital | Chinese

对数据管理方法的再思考有助于最大化提升您的竞争优势。随着数据驱动型组织的兴起，实施成功的数据治理计划比以往任何时候都更为重要。在我们的新白皮书中了解原因：数据治理和管理新思考。

1 April 2020

White Paper

Rethinking Data Governance and Data Management | Digital | Japanese

データマネジメントへのアプローチを再考することで、競争上の優位性を最大化できます。データ駆動型組織が増加しているなかで、成功するデータガバナンスプログラムの実装はこれまで以上に重要になっています。新しいホワイトペーパー「データガバナンスとマネジメントの再考」でその理由を学びましょう。

1 February 2020

White Paper

Auditing Cyber Security | Digital | Chinese

Cyber security has become a prevalent issue facing most organizations—one that companies recognize as an enterprise-wide issue requiring thoughtful attention.

1 March 2018

White Paper

Adopting GDPR Using COBIT 5 | Digital | Spanish

The clock is ticking on the May 2018 deadline for compliance with the European Union’s General Data Protection Regulation (GDPR).

1 March de 2018

White Paper

GEIT for Health Care | Digital | Chinese

Heath care is one of the most complex and regulated business sectors in the world. In addition, the rapid pace of change in the sector makes it one of the most dependent on information technology.

1 March 2018

White Paper

ISACA Tech Brief: Understanding Artificial Intelligence | Digital | Spanish

Organizations are great at collecting data. They are often less proficient at making informed business decisions from the data they collect. Artificial and augmented intelligence, machine learning and expert systems offer promise for remedying this situation.

1 February 2018

White Paper

GDPR Data Protection Impact Assessments | Digital | Spanish

By now you are surely aware of the European Union General Data Protection Regulation (GDPR) that goes into effect on 25 May 2018.

1 January 2018

White Paper

Relating the COSO Internal Control—Integrated Framework & COBIT | Digital | Japanese

This white paper takes the refreshed and updated COSO Internal Control—Integrated Framework (the COSO framework) as its base structure and examines how the relevant components and content of the COBIT 5 framework and its supporting guidance deliverables relate to the COSO framework

1 July 2017

White Paper

The Cyberresilient Enterprise: What the Board of Directors Needs to Ask | Digital | Chinese

Advances in the digital marketplace are creating more opportunities for value—and risk. As organizations leverage cloud computing, the Internet of Things, mobile computing and social media, digital risk management takes on greater importance.

1 May 2017

White Paper

The Cyberresilient Enterprise: What the Board of Directors Needs to Ask | Digital | Japanese

Advances in the digital marketplace are creating more opportunities for value—and risk. As organizations leverage cloud computing, the Internet of Things, mobile computing and social media, digital risk management takes on greater importance.

1 May 2017

White Paper

Business Continuity Management: Emerging Trends | Digital | French

As the pace of change in information technology accelerates, business continuity management (BCM) continues to evolve rapidly within enterprises to meet increased market and regulatory demands.

1 de enero de 2016

White Paper

Cybersecurity: What the Board of Directors Needs to Ask | Digital | Korean

This joint project from ISACA and The Institute of Internal Auditors Research Foundation offers guidance to board members on the questions they should be asking regarding cybersecurity in their organizations.

1 December 2015

White Paper

Cybersecurity: What the Board of Directors Needs to Ask | Digital | Polish

This joint project from ISACA and The Institute of Internal Auditors Research Foundation offers guidance to board members on the questions they should be asking regarding cybersecurity in their organizations.

1 December 2015

White Paper

Store>Resources European Cybersecurity Implementation: Overview | Digital | Ukrainian

Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare. Factors contributing to the need for improved cybersecurity include: ubiquitous broadband, IT-centric business and society, and social stratification of IT skills.

1 August 2014

White Paper

The Cyberresilient Enterprise: What the Board of Directors Needs to Ask | Digital | Hebrew

Advances in the digital marketplace are creating more opportunities for value—and risk. As organizations leverage cloud computing, the Internet of Things, mobile computing and social media, digital risk management takes on greater importance.

1 August 2015

White Paper

The Cyberresilient Enterprise: What the Board of Directors Needs to Ask | Digital | Spanish

Advances in the digital marketplace are creating more opportunities for value—and risk. As organizations leverage cloud computing, the Internet of Things, mobile computing and social media, digital risk management takes on greater importance.

1 August 2015

White Paper

Industrial Control Systems: A Primer for the Rest of Us | Digital | Spanish

The current landscape for industrial control systems’ (ICS) cybersecurity is best described as turbulent, as system owners struggle to protect systems that were never intended to be interconnected.

1 de May de 2015

White Paper

Internet of Things: Risk and Value Considerations | Digital | Korean

The Internet of Things (IoT) revolution has the potential to be staggeringly transformational and, at the same time, highly disruptive to business.

1 January 2015

White Paper

Mobile Payments: Risk, Security and Assurance Issues | Digital | Italian

Mobile payments as a financial transaction medium emerged around a decade ago. Adoption was slow due to the nature of the mobile technology supporting the concept.

1 October 2014

White Paper

European Cybersecurity Implementation: Overview | Digital | Polish

Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare. Factors contributing to the need for improved cybersecurity include: ubiquitous broadband, IT-centric business and society, and social stratification of IT skills.

1 August 2014

White Paper

Privacy and Big Data | Digital | Spanish

Improved decision making, faster time to market, better customer service and increased profits are just some of the benefits contributing to the explosion of big data implementation across enterprises of all sizes.

1 September 2013

White Paper

Privacy and Big Data | Digital | French

Improved decision making, faster time to market, better customer service and increased profits are just some of the benefits contributing to the explosion of big data implementation across enterprises of all sizes.

1 August 2013

White Paper

Privacy and Big Data | Digital | Polish

Improved decision making, faster time to market, better customer service and increased profits are just some of the benefits contributing to the explosion of big data implementation across enterprises of all sizes.

1 August 2013

White Paper

Privacy and Big Data | Digital | Portuguese

Improved decision making, faster time to market, better customer service and increased profits are just some of the benefits contributing to the explosion of big data implementation across enterprises of all sizes.

1 August 2013

White Paper

Big Data: Impacts and Benefits | Digital | French

Experienced business and IT professionals know that optimizing their use of big data as a resource will deliver real business value to the enterprise stakeholders.

1 April 2013

White Paper

Big Data: Impacts and Benefits | Digital | Portuguese

Experienced business and IT professionals know that optimizing their use of big data as a resource will deliver real business value to the enterprise stakeholders.

1 April 2013

White Paper

Cloud Governance: Questions Boards of Directors Need to Ask | Digital | Portuguese

Cloud computing is gaining momentum. As cloud offerings gain maturity, cloud service providers are becoming more competitive. Some providers are reducing prices as they realize investments and leverage economies of scale.

1 April 2013

White Paper

Cloud Governance: Questions Boards of Directors Need to Ask | Digital | Spanish

Cloud computing is gaining momentum. As cloud offerings gain maturity, cloud service providers are becoming more competitive. Some providers are reducing prices as they realize investments and leverage economies of scale.

1 April 2013

White Paper

Cloud Governance: Questions Boards of Directors Need to Ask | Digital | French

Cloud computing is gaining momentum. As cloud offerings gain maturity, cloud service providers are becoming more competitive. Some providers are reducing prices as they realize investments and leverage economies of scale.

1 January 2013

White Paper

Calculating Cloud ROI: From the Customer Perspective | Digital | French

Marketing hype claims that cloud computing can help any enterprise meet most IT service needs at a lower total cost of ownership (TCO) and higher return on investment (ROI).

1 July 2012

White Paper

Calculating Cloud ROI: From the Customer Perspective | Digital | Portuguese

Marketing hype claims that cloud computing can help any enterprise meet most IT service needs at a lower total cost of ownership (TCO) and higher return on investment (ROI).

1 July 2012

White Paper

Calculating Cloud ROI: From the Customer Perspective | Digital | Spanish

Marketing hype claims that cloud computing can help any enterprise meet most IT service needs at a lower total cost of ownership (TCO) and higher return on investment (ROI).

1 July 2012

White Paper

Incident Management and Response | Digital | French

Incident response is a key component of an enterprise business continuity and resilience program. The increasing number and diversity of information security threats can disrupt enterprise business activities and damage enterprise information assets.

1 March 2012

White Paper

Guiding Principles for Cloud Computing Adoption and Use | Digital | French

The drive for value, the need to reduce technology costs and the business demand for increased agility in how technology is used have caused enterprises to adopt cloud computing strategies.

1 February 2012

White Paper

Guiding Principles for Cloud Computing Adoption and Use | Digital | Portuguese

The drive for value, the need to reduce technology costs and the business demand for increased agility in how technology is used have caused enterprises to adopt cloud computing strategies.

1 de February de 2012

White Paper

Guiding Principles for Cloud Computing Adoption and Use | Digital | Spanish

The drive for value, the need to reduce technology costs and the business demand for increased agility in how technology is used have caused enterprises to adopt cloud computing strategies.

1 de February de 2012

White Paper

Mobile Payments: Risk, Security and Assurance Issues | Digital | French

Mobile payments as a financial transaction medium emerged around a decade ago. Adoption was slow due to the nature of the mobile technology supporting the concept.

1 November 2011

White Paper

Mobile Payments: Risk, Security and Assurance Issues | Digital | Spanish

Mobile payments as a financial transaction medium emerged around a decade ago. Adoption was slow due to the nature of the mobile technology supporting the concept.

1 November 2011

White Paper

Sustainability | Digital | French

Now, more than ever, enterprises seek ways to reduce costs to help maintain profits.

1 June 2011

White Paper

Sustainability | Digital | Spanish

Now, more than ever, enterprises seek ways to reduce costs to help maintain profits. IT offers a suitable target for sustainability and “green” efforts—efforts that can pay off in ways other than financial by creating a reputation for corporate social responsibility and providing a differentiator in the competition to attract employee talent.

1 June 2011

White Paper

Mobile Payments: Risk, Security and Assurance Issues | Digital | Portuguese

Mobile payments as a financial transaction medium emerged around a decade ago. Adoption was slow due to the nature of the mobile technology supporting the concept.

1 de Janiero 2011

White Paper

Data Leak Prevention | Digital | Spanish

Data leak prevention (DLP) is a suite of technologies aimed at stemming the loss of sensitive information that occurs in enterprises across the globe.

9 September 2010

White Paper

Data Leak Prevention | Digital | French

Data leak prevention (DLP) is a suite of technologies aimed at stemming the loss of sensitive information that occurs in enterprises across the globe.

1 September 2010

White Paper

Data Leak Prevention | Digital | Portuguese

Data leak prevention (DLP) is a suite of technologies aimed at stemming the loss of sensitive information that occurs in enterprises across the globe.

1 September 2010

White Paper

Virtualization: Benefits and Challenges | Digital | French

Virtualization is a high-tech buzzword in broad use today, but its increasing importance is based on more than just the passing fancy of the crowd.

1 March 2010

White Paper

Virtualization: Benefits and Challenges | Digital | Portuguese

Virtualization is a high-tech buzzword in broad use today, but its increasing importance is based on more than just the passing fancy of the crowd. With its potential to reduce capital expenses and energy costs, virtualization presents an attractive solution for enterprises looking to save money and generate value from their IT investments.

1 March 2010

White Paper

Virtualization: Benefits and Challenges | Digital | Spanish

Virtualization is a high-tech buzzword in broad use today, but its increasing importance is based on more than just the passing fancy of the crowd.

1 March 2010

White Paper

Cloud Computing: Business Benefits and Security, Governance and Assurance Perspectives

Cloud computing is an emerging technology that may help enterprises meet the increased requirements of lower total cost of ownership (TCO), higher return on investment (ROI), increased efficiency, dynamic provisioning and utility-like pay-as-you-go services.

1 January 2009

White Paper

Cloud Computing: Business Benefits and Security, Governance and Assurance Perspectives | Digital | Portuguese

Cloud computing is an emerging technology that may help enterprises meet the increased requirements of lower total cost of ownership (TCO), higher return on investment (ROI), increased efficiency, dynamic provisioning and utility-like pay-as-you-go services.

1 January 2009

White Paper

Cloud Computing: Business Benefits and Security, Governance and Assurance Perspectives | Digital | Spanish

Cloud computing is an emerging technology that may help enterprises meet the increased requirements of lower total cost of ownership (TCO), higher return on investment (ROI), increased efficiency, dynamic provisioning and utility-like pay-as-you-go services.

1 January 2009

Home / Resources / Insights and Expertise / White Papers

White Papers

Featured White Paper

Using the Digital Trust Ecosystem Framework to Achieve Trustworthy AI

Browse All ISACA White Papers

Filters

Domain

Credentials

Subjects

Language

White Paper

Digital Trust: A Modern-Day Imperative | Digital | English

White Paper

Using DTEF to Achieve Trustworthy AI

White Paper

Insights Into China’s Personal Information Protection Law | Digital | English

White Paper

The Promise and Peril of the AI Revolution: Managing Risk

White Paper

Physical Penetration Testing

White Paper

Eliminating Deceptive Privacy Practices: Building Trust by Addressing Privacy Dark Patterns

White Paper

Blueprint for Ransomware Defense

White Paper

Incorporating Risk Management into Agile Projects

White Paper

Demystifying Linux | Digital | English

White Paper

5G Privacy: Addressing Risk and Threats | Digital | English

White Paper

Using Risk Tolerance to Support Enterprise Strategy | Digital | English

White Paper

Audit Practitioner’s Guide to Machine Learning, Part 1: Technology | Digital | English

White Paper

Audit Practitioner’s Guide to Machine Learning, Part 2: Compliance Risk | Digital | English

White Paper

The Great Resignation: Business Challenges and Sustainable Solutions | Digital | English

White Paper

Defending Data Smartly | Digital | English

White Paper

IT Audit Perspectives on Today’s Top Technology Risks | Digital | English

White Paper

How to Drive Growth, Strategy and Governance Through Design | Digital | English

White Paper

Digital Trust A Modern Day Imperative

White Paper

Zero Trust: How to Beat Adversaries at Their Own Game | Digital | English

White Paper

How to Be a Leader People Don't Want to Leave

White Paper

Governance Roundup - What Are You Doing About Environmental, Social and Governance Factors in Your Enterprise? | Digital | English

White Paper

Privacy in Practice 2022

White Paper

Destination: Agile Auditing | Digital | English

White Paper

AI Uses by Blue Teams Security | Digital | English

White Paper

The Pulse: Emerging Technology 2021 | Digital | English

White Paper

Safeguarding the Future

White Paper

Digital Operational Resilience in the EU Financial Sector: A Risk-Based Approach | Digital | English

White Paper

Ensuring Privacy Through Effective Data Management | Digital | English

White Paper

Assessing IoT | Digital | English

White Paper

A Holistic Approach to Mitigating Harm from Insider Threats | Digital | English

White Paper

State of Cybersecurity 2021, Part 2: Threat Landscape, Security Operations and Cybersecurity Maturity | Digital | English

White Paper

Optimizing Risk Response | Digital | English

White Paper

5 Ways to Improve the Quality Mindset of Your Organization

White Paper

Using ITIL 4 and COBIT 2019 to Create An Integrated I&T Framework Environment | Digital | English

White Paper

Cyberrisk Quantification | Digital | English