-

New COBIT for DevOps Audit Program from ISACA Provides Guidance for DevOps Activities

Audit program is a companion to COBIT Focus Area: DevOps Using COBIT® 2019

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Audit and related practitioners know that there are business risks associated with DevOps practices—including insufficient assurance and inadequate planning, deployment, continuous monitoring and management of DevOps processes. The new COBIT for DevOps Audit Program from ISACA leverages concepts and guidance that DevOps teams can adopt to help them realize the benefits of DevOps while mitigating its risks.

Designed to accompany the COBIT Focus Area: DevOps Using COBIT® 2019 publication, the COBIT for DevOps Audit Program gives enterprises a tool to evaluate management practices relevant to developing an effective governance system over DevOps.

The COBIT for DevOps Audit Program is built on the four COBIT management domains and associated objectives, Align, Plan and Organize; Build, Acquire and Implement; Deliver, Service and Support; and Monitor, Evaluate and Assess. The program details testing steps for DevOps-specific activities outlined in the COBIT DevOps Focus area, aiding the audit process for organizations using COBIT and DevOps.

“It is important for management to take time to evaluate the effectiveness of their organization’s DevOps activities to ensure they are keeping their governance system strong to mitigate risk,” says Lisa Villanueva, ISACA principal, IT governance professional practices. “Assessing a DevOps governance system through the lens of COBIT concepts can be an effective approach for auditors.”

Villanueva writes further on this new audit program in a new blog post for ISACA Now at https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2022/evaluating-governance-over-devops-practices.

COBIT for DevOps Audit Program is available at https://store.isaca.org/s/store#/store/browse/detail/a2S4w000005E8ecEAC and costs US $25 for members and $49 for nonmembers. Additional audit resources can be found at https://www.isaca.org/resources/it-audit.

About ISACA

For more than 50 years, ISACA® (www.isaca.org) has advanced the best talent, expertise and learning in technology. ISACA equips individuals with knowledge, credentials, education and community to progress their careers and transform their organizations, and enables enterprises to train and build quality teams. ISACA is a global professional association and learning organization that leverages the expertise of its more than 150,000 members who work in information security, governance, assurance, risk and privacy to drive innovation through technology. It has a presence in 188 countries, including more than 220 chapters worldwide. In 2020, ISACA launched One In Tech, a philanthropic foundation that supports IT education and career pathways for under-resourced, under-represented populations.

Twitter: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews

Contacts

Emily Van Camp, evcamp@isaca.org, +1.847.385.7223
Kristen Kessinger, communications@isaca.org, +1.847.660.5512

ISACA


Release Versions

Contacts

Emily Van Camp, evcamp@isaca.org, +1.847.385.7223
Kristen Kessinger, communications@isaca.org, +1.847.660.5512

More News From ISACA

ISACA Digital Trust Workforce Development Program to Prepare More than 130 Learners for Tech Jobs in 2026

SCHAUMBURG, Ill.--(BUSINESS WIRE)--ISACA and the ISACA Foundation are expanding the ISACA Digital Trust Workforce Development Program in select cities across the United States. The expansion was made possible thanks to a grant from the Caterpillar Foundation to the ISACA Foundation. The ISACA Digital Trust Workforce Development Program helps individuals build practical, job-ready skills and earn ISACA certificates that support entry into the IT workforce. The program’s courses, which are suppor...

AI Use Accelerates, While Governance and ROI Lag, Says New ISACA Research

SCHAUMBURG, Ill.--(BUSINESS WIRE)--While 90 percent believe employees are using artificial intelligence in their organization, only 22 percent say AI return on investment (ROI) has met or exceeded their expectations, according to ISACA’s new 2026 AI Pulse Poll. With responses from more than 3,400 digital trust professionals across IT audit, governance, cybersecurity, privacy and emerging technology roles, ISACA’s poll finds that AI has become embedded in day-to-day work; however, governance and...

As AI Adoption Outpaces Controls, ISACA Launches Advanced in AI Risk Certification

SCHAUMBURG, Ill.--(BUSINESS WIRE)--As organizations increasingly leverage AI across their business, risk professionals face the challenge of balancing AI’s transformative potential with vigilant risk management in light of new vulnerabilities, threats, and risk. To equip IT risk professionals with the specialized skills and knowledge to manage these complex risks, ISACA has introduced the new Advanced in AI Risk (AAIR) certification. The AAIR credential validates candidates’ ability to evaluate...
Back to Newsroom