Manage your risks

As information technology becomes more entrenched across a wider base of functions and individuals, the rate of innovation will increase – unfortunately, so will the rate of exposure to risks. More education and awareness will be needed so that organisations, management and users will understand the boundaries within which they can and should apply discretion in the use of information. Most business risks will have an impact on IT and there will be greater appreciation for the fact that all IT risks are business risks.

The need to link sound corporate governance with effective internal control and risk management has never been greater. To benefit most from the information that is the lifeblood of your organisation, it is essential to have an IT governance strategy, assurance and information security programme aligned with business goals and capable of effectively managing risk. Employing experienced IT audit and security professionals can help ensure success.

Individuals with IS audit, control and security work experience will find the CISA (Certified Information Systems Auditor) designation tailored to their knowledge and skills.

For the employer, CISA ensures that employees have the knowledge and experience necessary to adequately control, monitor and assess an enterprise’s IT and business systems. CISA also ensures that the employee has the proven ability to perform reviews in accordance with globally accepted standards and maintain ongoing professional development. CISA also helps an enterprise’s IT and business systems operate with greater efficiency and optimum effectiveness.

For the professional, CISA provides: a global and lifelong symbol of knowledge and expertise; competitive advantage; higher earnings and career growth; the benefits of becoming part of an elite peer network; and the ability to leverage the tools and resources of a global community of industry experts.

CISA was again selected as a finalist in the 2011 Best Professional Certification Programme by SC magazine. CISA earned a place on the list of highest paying IT security certifications on the 2011 IT Skills Demand and Pay Trends Report from Foote Partners. CISA was also named in the top five of Foote Partners 2011 semi-annual Hot List Forecast of IT skills and certifications that will increase in value over the next six months. The 2010 Information Career Trends Survey, conducted by the Information Security Media Group, found CISA to be one of the three most sought-after certifications.

ISACA certifications have earned accreditation by the American National Standards Institute and are approved by the US Department of Defense.

ISACA (www.isaca.org) is a leading global provider of knowledge, certifications, community, advocacy and education on information systems assurance and security, enterprise governance and management of IT, and IT-related risk and compliance. The non-profit, independent ISACA hosts international conferences, publishes the ISACA Journal, and develops international IS auditing and control standards.

ISACA continually updates and expands the practical guidance and product family based on the COBIT framework. COBIT helps IT professionals and enterprise leaders fulfil their IT governance and management responsibilities, particularly in the areas of assurance, security, risk and control, and deliver value to the business.

The ISACA Malta Chapter was founded in 2005 and currently has 130 members. The local chapter has successfully organised various events over the past years including three biannual conferences.