ISACA’s expert guidance gives professionals and enterprises the tools, 管理IT风险的技术和理解.

人工智能革命的希望与危险

人工智能革命的希望与危险

AI is rapidly sweeping through our businesses and our world. 对ciso的需求, IT风险经理, executives and IT senior management to keep pace with the rapidly evolving risk landscape is urgent.

运用风险承受能力支持澳门赌场官方下载战略

运用风险承受能力支持澳门赌场官方下载战略

有效的澳门赌场官方下载风险管理需要所有利益相关者一致地理解和沟通风险术语.

风险场景工具包

风险场景工具包

风险场景的使用可以通过帮助风险团队理解并向业务流程所有者和其他涉众解释风险来增强风险管理工作.

风险场景入门包

风险场景入门包

此工具包, 免费提供给ISACA澳门赌场官方软件, 包括10个示例风险场景,从业者可以使用这些场景,并根据其澳门赌场官方下载中的特定上下文进行调整. 风险情景通过构建能够激励人们采取行动的叙述,促进了风险管理中的沟通.

风险入门工具包

风险入门工具包

ISACA created the IT 风险入门工具包 to help users develop an 它的风险 Program at their organization. 通过详细的模板和指南,您将能够:

  • Establish a consistent, disciplined, and integrated approach to risk management.
  • Formalize a governance structure for risk oversight which includes the policies, 流程, and control systems that support risk-related decision making.
  • 和更多的...
WHPEUFS

Digital Operational Resilience in the EU Financial Sector: A Risk-Based

2008年的金融危机是现代史上最具破坏性、影响最深远的全球衰退之一. While the reforms that followed strengthened the resilience of the financial sector, 它们仅间接涉及信息和通信技术(ICT),未完全涉及数字业务弹性.

WHPORR

优化风险应对

Risk is a part of everyday life, from transportation and travel to business and financial decisions. 数字世界也不例外. 信息技术推动了创新,为全球澳门赌场官方下载创造了新的机遇, 它们并非没有危险.

MD-EPUBITRG

IT风险基础研究指南

A comprehensive study aid that will help to prepare learners for the IT风险基础证书 exam. 本课程提供信息技术相关风险管理的基础知识和方法,包括风险识别, 评价, 和响应.

RITF2

风险IT框架

The 风险IT框架 fills the gap between generic risk management concepts and detailed IT risk management. 它提供了端到端, comprehensive view of risks related to the use of IT and a similarly thorough treatment of risk management, 从高层的语气和文化, 对于操作问题. 总之, the framework will enable enterprises to understand and manage significant IT risk types, building upon the existing risk related components within the current ISACA frameworks.

RITPG2

风险资讯科技从业人员指南

The 风险资讯科技从业人员指南 provides practical guidance for risk professionals. 该指南包括大量可立即实施的实用风险管理技术.

通过IT风险专家开发和提供的培训,提高您的专业知识,增加您的职业潜力或澳门赌场官方下载技能.

IT-Risk_fundamentals

IT风险基础证书

Ideal for professionals who wish to learn about risk and information and technology (I&T)有关的风险, 他们目前与风险专家有互动, or are new to risk and interested in working as a risk or 它的风险 profession. Affirm your foundational knowledge of risk that is related to I&T.

CPE随需应变:风险要点包

IT风险视频

IT风险管理要点视频使您能够获得IT风险概念的关键基础知识, 对IT和业务的实践和影响. 这是IS/IT和业务经理的基本入门, practitioners and anyone interested in a risk management career is accessible on-demand, 在任何地方. 它的风险 Assessment Video will help you further your 它的风险 learning with the 它的风险 Assessment Video. 这是对信息系统/信息技术和业务经理的学习增强, practitioners and anyone interested in a risk management career is accessible on-demand, 在任何地方.

风险管理要点   It风险评估   两者同时购买

CRISC

(CRISC)获得风险和信息系统控制认证

ISACA’s Certified in Risk and Information Systems Control (CRISC)® 认证表明在识别和管理澳门赌场官方下载IT风险以及实现和维护信息系统控制方面具有专业知识. Gain instant recognition and credibility with CRISC and boost your career.

CPE随需应变:风险要点包

按需CPE:风险管理

The 按需CPE:风险管理 collection provides timely, 对IT审计有价值的见解, 安全, 和风险专业人士, and enables you to learn on your schedule while earning up to 5.5 ISACA cpe. 所有录音都是在ISACA北美CACS 2020会议上录制的,在90天内无限制,包括可下载的演示文稿.

When you want guidance, insight, tools and more, you’ll find them in the resources ISACA offers.

MD-WCB19IRFA

COBIT关注领域:信息 & 技术风险

COBIT关注领域:信息 & 技术风险 提供有关信息和技术的指导&T)风险以及如何将COBIT应用于I&风险实践.

白皮书

开始风险管理

我们的免费白皮书, 开始风险管理, 在解决组织中可能存在的任何独特因素时,探索必须达到的谨慎平衡. 制定商业战略, the enterprise may decide to accept some level of risk in exchange for pursuing business goals and objectives. 本文讨论了各种选择和注意事项.

白皮书

弥合数字风险差距

To help improve communication and effectiveness between Risk management and IT professionals, ISACA和RIMS合作发布了一份免费白皮书, 弥合数字风险差距, 哪些概述了将这些专业人员整合到整体数字战略团队中以创造价值并抵消不必要的风险和结果的最佳实践.

供应链弹性和连续性

供应链弹性和连续性

随着我们面临的每一场重大灾难——包括当前的大流行——业务连续性管理必须继续发展. 在新的免费白皮书中了解如何:供应链弹性和连续性:弥合全球大流行中暴露的差距.

圆圈中的点——ISACA的CMMI网络成熟度平台

CMMI网络成熟度平台

CMMI网络成熟度平台 features custom risk profiling, 评估, 差异分析, 以及路线图功能, and is in use across multiple sectors including financial services, 医疗保健和制造业. It addresses industry concerns and organizational challenges, including confidence in cybersecurity initiatives and prioritizing security programs. The platform gives businesses real-time knowledge of best cybersecurity practices, so organizations can make evidence-based decisions on how to improve cybersecurity programs.

查看风险管理出版物和资源

在利用IT风险框架来创建和维护最有效的技术和理解来管理IT风险方面获得额外的见解和指导.

从合规到风险的合作思维转变
博客

从合规到风险的合作思维转变

澳门赌场官方下载的目标是在现代业务和监管环境中最好地调整资源时,从基于合规性的关注点过渡到基于风险的方法是很有用的.

2023年10月23日
姗姗爸爸
博客

平衡AI的风险和回报

可以理解的是,许多澳门赌场官方下载在建立自己的人工智能方法时采取了谨慎的态度, but delaying on meaningful action comes with its own set of risks.

2023年9月15日