ISACA的专家指导为专业人士和澳门赌场官方下载提供了工具, techniques and understanding to manage IT Risk.

The Promise and Peril of the AI Revolution

The Promise and Peril of the AI Revolution

AI is rapidly sweeping through our businesses and our world. The need for CISOs, IT risk managers, 执行人员和IT高级管理人员迫切需要跟上快速发展的风险环境.

Using Risk Tolerance to Support Enterprise Strategy

Using Risk Tolerance to Support Enterprise Strategy

有效的澳门赌场官方下载风险管理需要所有利益相关者一致地理解和沟通风险术语.

Risk Scenarios Toolkit

Risk Scenarios Toolkit

风险场景的使用可以通过帮助风险团队理解并向业务流程所有者和其他涉众解释风险来增强风险管理工作.

Risk Scenarios Starter Pack

Risk Scenarios Starter Pack

This toolkit, free to ISACA members, 包括10个示例风险场景,从业者可以使用这些场景,并根据其澳门赌场官方下载中的特定上下文进行调整. 风险情景通过构建能够激励人们采取行动的叙述,促进了风险管理中的沟通.

Risk Starter Kit

Risk Starter Kit

ISACA创建了IT风险入门工具包,以帮助用户在其组织中制定IT风险计划. Through detailed templates and guides you’ll be able to:

  • 建立一致的、有纪律的、综合的风险管理方法.
  • 形式化风险监督的治理结构,其中包括策略, processes, and control systems that support risk-related decision making.
  • And More...
WHPEUFS

欧盟金融部门的数字化运营弹性:基于风险的分析

2008年的金融危机是现代史上最具破坏性、影响最深远的全球衰退之一. 而随后的改革增强了金融部门的韧性, 它们仅间接涉及信息和通信技术(ICT),未完全涉及数字业务弹性.

Optimizing Risk Response

Optimizing Risk Response

风险是日常生活的一部分,从交通和旅行到商业和财务决策. The digital world is no exception. 信息技术推动了创新,为全球澳门赌场官方下载创造了新的机遇, they are not without peril.

MD-EPUBITRG

IT Risk Fundamentals Study Guide

一个全面的学习援助,将帮助学习者准备IT风险基础证书考试. 本课程提供信息技术相关风险管理的基础知识和方法,包括风险识别, evaluation, and response.

Risk IT Framework

Risk IT Framework

风险IT框架填补了一般风险管理概念和详细IT风险管理之间的空白. It provides an end-to-end, 全面了解与IT使用相关的风险,并对风险管理进行类似的彻底处理, from the tone and culture at the top, to operational issues. In summary, 该框架将使澳门赌场官方下载能够理解和管理重要的IT风险类型, 在现有ISACA框架内与风险相关的现有组成部分的基础上.

Risk IT Practitioners Guide

Risk IT Practitioner Guide

《澳门赌场官方下载》为风险专业人员提供实用指导. 该指南包括大量可立即实施的实用风险管理技术.

通过IT风险专家开发和提供的培训,提高您的专业知识,增加您的职业潜力或澳门赌场官方下载技能.

IT-Risk_fundamentals

IT Risk Fundamentals Certificate

理想的专业人士谁希望了解风险和信息和技术(I&T)-related risk, whom currently interact with risk professionals, 或对风险不熟悉,并对风险或IT风险专业感兴趣. Affirm your foundational knowledge of risk that is related to I&T.

Illustration of a person learning online

IT Risk Videos

IT风险管理要点视频使您能够获得IT风险概念的关键基础知识, practices and impacts on IT and business. This essential primer for IS/IT and business managers, 从业人员和任何对风险管理职业感兴趣的人都可以按需访问, anywhere. 资讯科技风险评估短片有助你进一步了解资讯科技风险. This learning enhancement for IS/IT and business managers, 从业人员和任何对风险管理职业感兴趣的人都可以按需访问, anywhere.

RISK MANAGEMENT ESSENTIALS   IT RISK ASSESSMENT   PURCHASE BOTH TOGETHER

CRISC

(CRISC) Certified in Risk and Information Systems Control

ISACA风险与信息系统控制认证(CRISC)® 认证表明在识别和管理澳门赌场官方下载IT风险以及实现和维护信息系统控制方面具有专业知识. 在CRISC获得即时认可和信誉,促进澳门赌场官方下载.

Risk Essentials Bundle

Session Recording: Risk Management

会议记录:风险管理收集提供及时, valuable insights for IT Audit, Security, and Risk professionals, and enables you to learn on your schedule while earning up to 5.5 ISACA CPEs. 所有录音都是在ISACA北美CACS 2020会议上录制的,在90天内无限制,包括可下载的演示文稿.

如果您需要指导、见解、工具等,您可以在ISACA提供的资源中找到它们.

COBIT聚焦领域:信息与技术风险

COBIT Focus Area: Information & Technology Risk

COBIT Focus Area: Information & Technology Risk provides guidance related to information and technology (I&T) risk and how to apply COBIT to I&T risk practices.

Whitepaper

Getting Started With Risk Management

Our FREE white paper, Getting Started With Risk Management, 在解决组织中可能存在的任何独特因素时,探索必须达到的谨慎平衡. In formulating a business strategy, 澳门赌场官方下载可能决定接受一定程度的风险,以换取追求业务目标和目的. This paper discusses various options and considerations.

Whitepaper

Bridging the Digital Risk Gap

帮助改善风险管理人员与资讯科技专业人员之间的沟通和效率, ISACA and RIMS have partnered on a FREE white paper, Bridging the Digital Risk Gap, 哪些概述了将这些专业人员整合到整体数字战略团队中以创造价值并抵消不必要的风险和结果的最佳实践.

Supply Chain Resilience and Continuity

Supply Chain Resilience and Continuity

随着我们面临的每一场重大灾难——包括当前的大流行——业务连续性管理必须继续发展. 在新的免费白皮书中了解如何:供应链弹性和连续性:弥合全球大流行中暴露的差距.

dots in a circle - ISACA's CMMI Cybermaturity Platform

The CMMI Cybermaturity Platform

The CMMI Cybermaturity Platform features custom risk profiling, assessments, gap analyses, and roadmap functions, 它在包括金融服务在内的多个行业都得到了应用, healthcare and manufacturing. It addresses industry concerns and organizational challenges, 包括对网络安全倡议和优先安全计划的信心. 该平台为澳门赌场官方下载提供最佳网络安全实践的实时知识, 因此,组织可以就如何改进网络安全项目做出基于证据的决策.

View Risk Management Publications and Resources

在利用IT风险框架来创建和维护最有效的技术和理解来管理IT风险方面获得额外的见解和指导.

Collaborative Mindset Change from Compliance to Risk
Blog Post

Collaborative Mindset Change from Compliance to Risk

澳门赌场官方下载的目标是在现代业务和监管环境中最好地调整资源时,从基于合规性的关注点过渡到基于风险的方法是很有用的.

23 October 2023
ShanShan Pa
Blog Post

Balancing the Risks and Rewards of AI

可以理解的是,许多澳门赌场官方下载在建立自己的人工智能方法时采取了谨慎的态度, 但推迟采取有意义的行动本身也存在一系列风险.

15 September 2023
Bassel Kablawi
Risk Article

Reviewing the 2023 OWASP API Top 10

以确保澳门赌场官方下载不会遭受API安全漏洞的噩梦, the updated OWASP API Top 10 list is worth examining.

1 August 2023