|This article relies too much on references to primary sources. (November 2015)|
ISACA is an international professional association focused on IT Governance. Previously known as the Information Systems Audit and Control Association, ISACA now goes by its acronym only, to reflect the broad range of IT governance professionals it serves.
- 1 History
- 2 Current status
- 3 Major publications
- 4 Certifications
- 5 See also
- 6 References
- 7 External links
The ISACA originated in the USA in 1967, when a group of individuals working on auditing controls in computer systems started to become increasingly critical of the operations of their organizations. They identified a need for a centralized source of information and guidance in the field. In 1969, Stuart Tyrnauer, an employee of the (then) Douglas Aircraft Company, incorporated the group as the EDP Auditors Association (EDPAA). Tyrnauer served as the body's founding chairman for the first three years. In 1976 the association formed an education foundation to undertake large-scale research efforts to expand the knowledge of and value accorded to the fields of governance and control of information technology.
The association became the Information Systems Audit and Control Association in 1994.
ISACA currently serves more than 110,000 constituents (members and professionals holding ISACA certifications) in more than 180 countries. The job titles of members are such as IS auditor, consultant, educator, IS security professional, regulator, chief information officer and internal auditor. They work in nearly all industry categories. There is a network of ISACA chapters with more than 200 chapters established in over 180 countries. Chapters provide education, resource sharing, advocacy, networking and other benefits.
- Information System Control Journal
- Risk IT
- Standards, Guidelines and Procedures for information system auditing (Guideline co-developed with the International Federation of Accountants)
- Security, Audit and Control Features SAP ERP
- Val IT (Getting best value from IT investments)
Certified Information Systems Auditor (CISA)
Certified Information Security Manager (CISM)
Certified in the Governance of Enterprise IT (CGEIT)
Control Objectives for Information and Related Technology (COBIT) 5
Certified in Risk and Information Systems Control (CRISC)
Certified in Risk and Information Systems Control (CRISC) is a certification for information technology professionals with experience in managing IT risks, awarded by ISACA. To gain this certification, candidates must pass a written examination and have a minimum of three years work experience in at least three CRISC domains.
The intent of the certification is to provide a common body of knowledge for information technology/systems risk management, and to recognize the knowledge of enterprise and IT risk that a wide range of IT and Business practitioners have acquired, as well as the capability to: design, implement and maintain information system (IS) controls, to mitigate IS/IT risks.
- Risk identification, assessment and evaluation
- Risk response
- Risk monitoring
- Information systems control, design and implementation
- IS control, monitoring and maintenance
-  Archived 2 October 2007 at the Wayback Machine
- Vacca, John (2009). Computer and Information Security Handbook. Morgan Kaufmann Publications. Elsevier Inc. p. 600. ISBN 978-0-12-374354-1.
- Katsikas, Sokratis K. (2000). "A Postgraduate Programme on Information and Communication Systems Security". In Qing, Sihan; Eloff, Jan H. P. Information Security for Global Information Infrastructures. IFIP Advances in Information and Communication Technology 47. Springer. p. 50. ISBN 9780792379140. Retrieved 2013-05-23.
[...] the Information Systems Audit and Control Association (ISACA - formerly EDPAA) [...]
- Gleim, Irvin N.; Hillison, William A.; Irwin, Grady M. (June 1995). Auditing & systems: objective questions and explanations. 1 6 (6 ed.). Gainesville, Florida: Accounting Publications. p. 37. ISBN 9780917537745. Retrieved 2013-05-24.
In 1994, the association changed its name to the Information Systems Audit and Control Association.
- Verschoor, Curtis C. (2008). Audit Committee Essentials. John Wiley & Sons. p. 205. ISBN 9780470337073. Retrieved 2013-05-24.
[...] ISACA - previously known as the Information Systems Audit and Control Association [...]
-  Archived 16 July 2011 at the Wayback Machine
- [dead link]
- "Security, Audit and Control Features SAP ERP, 4th Edition". Isaca.org. Retrieved 2015-11-03.
- "Security, Audit and Control Features SAP ERP, 4th Edition - Review". ERPScan. 2015-09-17. Retrieved 2015-11-03.
- "How to Become CRISC Certified: 2015". Isaca.org. Retrieved 2015-11-03.
-  Archived 19 June 2011 at the Wayback Machine