Comments on: Driving Compliance: What We Have versus What We Need http://www.securitycatalyst.com/driving-compliance-what-we-have-versus-what-we-need/ Michael Santarcangelo delivers Awareness that Works™ Mon, 28 Jun 2010 13:51:54 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Jeff Ewing http://www.securitycatalyst.com/driving-compliance-what-we-have-versus-what-we-need/comment-page-1/#comment-3338 Jeff Ewing Fri, 12 Feb 2010 00:48:26 +0000 http://www.securitycatalyst.com/?p=2703#comment-3338 This is a good description the IT general controls that are typically focused around. For what its worth and from recent experience, Auditors (External & Internal) are moving to a common risk based approach and I am seeing a trend where they are applying CoBIT as their framework for their review. I am not recommending every organization adopt CoBIT or that it is a one size fit all, but if you want to get ahead of the curve, I would recommend you identify the controls/processes that would benefit & fit your organization, implement them, and assess yourself against CoBIT's assessment guidance. This is a good description the IT general controls that are typically focused around.

For what its worth and from recent experience, Auditors (External & Internal) are moving to a common risk based approach and I am seeing a trend where they are applying CoBIT as their framework for their review. I am not recommending every organization adopt CoBIT or that it is a one size fit all, but if you want to get ahead of the curve, I would recommend you identify the controls/processes that would benefit & fit your organization, implement them, and assess yourself against CoBIT’s assessment guidance.

]]> By: Michael Starks http://www.securitycatalyst.com/driving-compliance-what-we-have-versus-what-we-need/comment-page-1/#comment-3296 Michael Starks Sat, 30 Jan 2010 00:33:32 +0000 http://www.securitycatalyst.com/?p=2703#comment-3296 Jim, Nice to see you writing. Keep up the good work! -Mike P.S. Got my CISA recently. Welcome me to the dark side. :) Jim,

Nice to see you writing. Keep up the good work!

-Mike
P.S. Got my CISA recently. Welcome me to the dark side. :)

]]>