ISACA Podcast

COBIT 5 Principles: Where Did They Come From?

COBIT 5, a framework for the governance and management of enterprise IT, is a valuable resource that leverages proven practices, global thought leadership and groundbreaking tools. In this podcast, we discuss the COBIT 5 principles, where they came from and how enterprises can leverage the framework.

Implementing the NIST Cybersecurity Framework

The US National Institute of Standards and Technology’s Cybersecurity Framework can help enterprises secure their valuable information assets. The COBIT® 5 framework can be used to implement the NIST framework. In this podcast, we discuss the specific ways in which COBIT 5 can help enterprises that want to implement the Cybersecurity Framework.

The Automation Conundrum

The increasing proliferation of artificial intelligence systems presents many concerns. But not adopting AI systems could result in enterprises falling behind and missing key opportunities. In this podcast, we discuss AI threats, how to prevent these threats and the benefits of adopting AI systems.

The G7 and Cyber Security

A recent G7 meeting produced a document on cyber security, outlining international state cyber security behavior. While discussing cyber security at this level shows great progress, there is still room for growth. In this podcast, we discuss the G7 Principles and Actions on Cyber, why it is important, and areas for improvement.

Cyberwhatsit

The word “cyber” is growing in usage, but there is a lack of verbal clarity with respect to what it actually means. This ambiguity can lead to uncertainty about how to handle cyberrisk. In this podcast, we discuss the definitions of cybertheft, cyberattacks, cyberthreats and cyber security and the implications of these definitions.

Frameworkers of the World Unite

How are organizations complying with the US National Institute of Standards and Technology Cybersecurity Framework? In this podcast, we look at the framework as though it were a standard to determine how organizations can adhere to it.

Three Ways to Simplify Auditing Software Security Requirements and Design

Building security into software is a prerequisite for information assurance, and it is far cheaper to fix a defect in design than to fix it after production. Auditors can play a role in ensuring security is built into software. In this podcast, we discuss the ways in which organizations can incorporate security into the software design process.

Are Software Flaws a Security Problem?

Who is responsible when customer-facing systems crash? Program crashes can cause security problems. In this podcast, we explore how many causes of unexpected downtime are the same as those that lead to security breaches.

Addressing Cyber Security Vulnerabilities

Internet security is a growing concern and IT leaders need to increase public awareness of cyber security. Unchecked cyber security risk factors can greatly harm enterprises. In this podcast, we discuss areas for improvement that could prevent cyberattacks.

Will the Attacker Always Get Through?

Some chief information officers believe that it is unnecessary to build protections against cyberattackers because the attackers will always get through. But even if that were the case, there are still several steps that prudent enterprises should follow. In this podcast, we discuss the steps that can be taken to minimize risk if a cyberattack occurs.