CA Community

This week I am at the ISACA Asia Pacific Conference in Mumbai, India where Audit, Governance and Security professionals are meeting at the sold out event to share information and knowledge. One of the topics being debated are the results of the survey released by ISACA this week which identified that...

A recent blog post http://bit.ly/bVd2i1 from Forrester Research made some very useful points, in my opinion. The focus of the article was on flexibility, in two key respects. First, flexibility is a key requirement of any GRC program, primarily because the demands for risk and compliance are so fluid...

As Mike Hoefgen reported in his recent post “ Risk, Risk and More Risk ," the International Standards Organization recently published a new international standard on risk management, called ISO 31000. The availability of this new standard is likely prompting key questions from many GRC professionals...

For starters, Basel II is the second set of recommendations on banking laws and regulations published by the Basel Committee on Banking Supervision. It is the most important framework that is focused primarily on Financial Institutions. The key principles of Basel II can be summarized in its three pillars...

Can you hear it? That buzzing sound! The buzz I’ve been hearing is about ISO 31000, the new Risk Management Standard from the International Standards Organization . Then again, my wife continues to remind me that I'm hard of hearing. Search for the phrase “risk assessment” with Google and you’ll...

Managing service quality is not elusive, but, if attempted manually, it may seem so. Service quality management requires real time knowledge of every component that is involved in providing that service. For a service such as email or order management this means you must track status of the routers,...

"IT alignment" may be an over-used phrase, but it packs a punch when IT Operations gets an unexpected call from senior management, important customers or the help desk asking why a service is down or slow. Industry research shows that majority of IT departments first find out about service...

In mid-October, I attended the Gartner Symposium in Orlando, Florida, along with approximately 7000 IT professionals, vendors, partners and others – a record level turnout. In fact, Gartner reported that 1600 CIOs were in attendance, setting a record in the history of the conference. This is not surprising...

Attending the ISACA Information Security and Risk Management Conference (ISRMC) in Amsterdam next week? According to ISACA, this new event is an adaptation of the Network Security Conference and the Information Security Management Conference that combines elements of each to be an all encompassing security...

Many companies are attempting to unify, and hopefully streamline, their risk and compliance information, activities, and programs. Although the benefits of this approach can be significant, so are the challenges. I recently attended the GRC Summit 2009 in Boston, and there was a panel session in which...