Securing an IT Organization Through Governance, Risk Management, and Audit

Introduces CobiT5 methods from a cybersecurity perspective. Provides details of Cybersecurity Framework with emphasis on the processes directly related to governance, risk management, and audit. Maps each CSF step and activity to CobiT5 methods, resulting in an extension the CSF objectives with practical and measurable activities. Achieving CSF objectives using CobiT5 methods helps to leverage operational risk understanding in a business context, allowing the ICT organization to be proactive and competitive. This enables proactive value to the ICT organization’s stakeholders, converting high-level enterprise goals into manageable, specific goals rather than an unintegrated checklist model.

Ken Sigler is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills Michigan campus of Oakland Community College and the chair of the Campus Senate. His primary research is in the area of software management, software assurance, and cybersecurity. He has authored several books on the topic of cybersecurity ICT management and developed the college’s CIS program option Information Technologies for Homeland Security, which has a recognized relationship with the Committee on National Security Systems. Sigler serves as the liaison for the college as one of three founding members of the International Cybersecurity Education Coalition (ICSEC), which is now the Midwest chapter for CISSE.

James L. Rainey, III, DMIT, is an IT specialist with the U.S. government where he works on technical project documentation within the SDLC. Dr. Rainey holds an MS degree in computer and information systems and did a tour with the Department of Defense where he earned a citation for his work. Dr. Rainey has also worked as a UNIX system administrator, SAP basis administrator, and enterprise and infrastructure architect. Additionally, he worked at Comerica Bank’s Data Center in Auburn Hills, Michigan, as a developer and taught at the University of Detroit Mercy’s Computer and Information Systems Department for 10 years as an adjunct.