Control Methodologies

• D

  COBIT Mapping: Mapping ISO/IEC 17799: 2000 With COBIT 811
  • dhanks  

  1
  0
  Votes
  1
  Posts
  503
  Views

  No one has replied

• M

  Data Management 1629
  • Monk  

  1
  0
  Votes
  1
  Posts
  740
  Views

  No one has replied

• B

  My organization wants to implement COBIT. Where do I start? 2334
  • bertbarndoor  

  1
  0
  Votes
  1
  Posts
  460
  Views

  No one has replied

• H

  Microsoft PCI/DSS Compliance Planning Guide 2760
  • harrywaldron  

  1
  0
  Votes
  1
  Posts
  475
  Views

  No one has replied

• B

  SOX and Risk assessment 891
  • Bhoopendra  

  1
  0
  Votes
  1
  Posts
  498
  Views

  No one has replied

• M

  Anti-fraud controls 925
  • Mocha  

  1
  0
  Votes
  1
  Posts
  447
  Views

  No one has replied

• M

  Which Cobit Processes Most Relate to SOX 927
  • marge  

  1
  0
  Votes
  1
  Posts
  419
  Views

  No one has replied

• M

  Sample of Internal control report under section 404 1065
  • mikeladios  

  1
  0
  Votes
  1
  Posts
  492
  Views

  No one has replied

• B

  SOX and Risk assessment 891
  • Bhoopendra  

  1
  0
  Votes
  1
  Posts
  410
  Views

  No one has replied

• M

  Anti-fraud controls 925
  • Mocha  

  1
  0
  Votes
  1
  Posts
  414
  Views

  No one has replied

• M

  Sample of Internal control report under section 404 1065
  • mikeladios  

  1
  0
  Votes
  1
  Posts
  406
  Views

  No one has replied

• H

  IT Standards - Link discusses history 1725
  • harrywaldron  

  1
  0
  Votes
  1
  Posts
  442
  Views

  No one has replied

• A

  new COSO guidance coming soon? 2105
  • Albie  

  1
  0
  Votes
  1
  Posts
  713
  Views

  No one has replied

• A

  IT controls objectives for Sarbanes-Oxley Discussion 2274
  • AuditorSox  

  1
  0
  Votes
  1
  Posts
  463
  Views

  No one has replied

• D

  COSO Guidance - Monitoring 2470
  • Denis  

  1
  0
  Votes
  1
  Posts
  444
  Views

  No one has replied

• H

  Free COBIT 5 PDF copy by registering with ISACA 1920
  • harrywaldron  

  1
  0
  Votes
  1
  Posts
  499
  Views

  No one has replied

• S

  NSAR - no self assessement 2916
  • selena151  

  1
  0
  Votes
  1
  Posts
  419
  Views

  No one has replied

• S

  Operational review 2917
  • selena151  

  1
  0
  Votes
  1
  Posts
  449
  Views

  No one has replied

• S

  Impact of COSO Frameworks on scope of Internal Controls 11
  • SOX-Migration  

  6
  0
  Votes
  6
  Posts
  736
  Views

  H

  We also tried to bring a integrated approach to life. But that didn’t really work out and got most of the people involved confused. There’s a thin line between sox and risk management. And most of the people can’t see the difference between operational risk, which mainly causes economic loss and financial misstatement risks. Yes - both are process related, but the goals are different and therefore the requirements. After changing to push only sox and postpone the risk management assesment after sox implemention, we’re doing quit well. Even though we’re not required too, we will finish the sox project by the end of 2004. By then we’ll implemented COSO and CObIT for sox purposes and can start from there with out risk management project.
• S

  CISP and SOX 107
  • SOX-Migration  

  4
  0
  Votes
  4
  Posts
  453
  Views

  S

  Non-repudiation appears to be part of SOX am I right? But not part of CISP (strangely) - anyone know? I will fail SOX but not fail CISP if I dont have non-repudiation of credit card transactions?? Non-repudiation is an objective in both Cobit and COSO. ‘Where appropriate, controls exist to ensure that transactions cannot be denied by either party and that controls are implemented to provide nonrepudiation of origin or receipt, proof of submission and receipt of transactions.’ DS 5.15 However… If after doing a risk / benefit analysis you determine that its not economically or other wise feasable for you to meet this requirement you need to put in controls to mitigate this risk. They do need to be strong controls because if one side can repudiate then incorrect financial information can be put into the system. It depends also on the dollar amounts that might be repudiated etc etc. I think if you sit down with your controller / CFO etc they can come up with controls ot mitigate the repudiation risk.