IsAuditing.com (Information Systems Audit & Security)
All about IS audit, CISA, and Information Security
muhammad usman 
Recently I wrote about who will be the auditor of the auditors. This week’s topic is purely information systems audit related. Access control is vital and critical, both in case of physical and digital security. It determines who can access which resources within a system or at a facility. Access control systems have various types, … Read more
Auditors’ role is pivotal in the complex web of corporate governance and financial oversight because they act as gatekeepers of trust and transparency. Their role is mostly not in the spotlight. Still, they are the unsung sentinels who scrutinize the financial statements of companies, and their work is at the root of countless financial decisions … Read more
We recently wrote about some tips to secure email. Now, we will have a look at the data security for the cloud. With the ever-changing landscape of technology, cloud computing has been coming to the mainstream. This has radicalized the way organizations manage, process, and store data. With this digital metamorphosis happening quickly, the topic … Read more
Hello, digital wanderer! 🚀 If you’ve ever rolled your eyes at yet another “important message about our privacy policy update” email from IT guys (seriously, how many times can they update it?), then you’re in the right place because we will help you understand the importance of securing email. While those updates might be snooze-worthy … Read more
Securing information systems is of paramount importance in a world that has been digitalized beyond recognition if you have not been following the epic change. Federal information security controls indicate that even the government is responsive to this change. These controls have been designed to act as a critical shield against ever-evolving cybersecurity threats to … Read more
Did you know? Over 34% of businesses worldwide experience insider threats every year. Over the past two years, there has been a 47% increase in insider incidents. These days, data protection has become a major need of everyone be it individuals or any organization. However, for an organization, insider threats can put them at dynamic … Read more
Securing a network is of paramount importance for businesses in this age where digital information, which is also the lifeblood of companies, travels through the network. A network security policy serves as the fundamental framework comprising rules, guidelines and procedures for safeguarding the critical data that travels on network and the digital assets that process … Read more
Information security risk refers to the damage that may result from a successful attack against IT systems. This risk can lead to a range of security incidents like data breaches, noncompliance with regulatory requirements, reputational loss, and financial costs. Difference between risk and threat There is a little and subtle difference between risk and threat, … Read more
According to Cost of a Data Breach Report 2023 from IBM, one data breach, on average, costs $4.5 million. This has increased 15 percent over the past three years. If you look up online for types of data breaches, you will most likely see ransomware, malware, phishing etc. listed as types. But these are the … Read more
If you are studying information security at a university, or you have completed your studies and looking to do some projects based on cyber security to build your portfolio, having a look at the possible topics of such projects is a good idea. It is almost certain that you will be required to complete a … Read more