-

New COBIT for DevOps Audit Program from ISACA Provides Guidance for DevOps Activities

Audit program is a companion to COBIT Focus Area: DevOps Using COBIT® 2019

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Audit and related practitioners know that there are business risks associated with DevOps practices—including insufficient assurance and inadequate planning, deployment, continuous monitoring and management of DevOps processes. The new COBIT for DevOps Audit Program from ISACA leverages concepts and guidance that DevOps teams can adopt to help them realize the benefits of DevOps while mitigating its risks.

Designed to accompany the COBIT Focus Area: DevOps Using COBIT® 2019 publication, the COBIT for DevOps Audit Program gives enterprises a tool to evaluate management practices relevant to developing an effective governance system over DevOps.

The COBIT for DevOps Audit Program is built on the four COBIT management domains and associated objectives, Align, Plan and Organize; Build, Acquire and Implement; Deliver, Service and Support; and Monitor, Evaluate and Assess. The program details testing steps for DevOps-specific activities outlined in the COBIT DevOps Focus area, aiding the audit process for organizations using COBIT and DevOps.

“It is important for management to take time to evaluate the effectiveness of their organization’s DevOps activities to ensure they are keeping their governance system strong to mitigate risk,” says Lisa Villanueva, ISACA principal, IT governance professional practices. “Assessing a DevOps governance system through the lens of COBIT concepts can be an effective approach for auditors.”

Villanueva writes further on this new audit program in a new blog post for ISACA Now at https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2022/evaluating-governance-over-devops-practices.

COBIT for DevOps Audit Program is available at https://store.isaca.org/s/store#/store/browse/detail/a2S4w000005E8ecEAC and costs US $25 for members and $49 for nonmembers. Additional audit resources can be found at https://www.isaca.org/resources/it-audit.

About ISACA

For more than 50 years, ISACA® (www.isaca.org) has advanced the best talent, expertise and learning in technology. ISACA equips individuals with knowledge, credentials, education and community to progress their careers and transform their organizations, and enables enterprises to train and build quality teams. ISACA is a global professional association and learning organization that leverages the expertise of its more than 150,000 members who work in information security, governance, assurance, risk and privacy to drive innovation through technology. It has a presence in 188 countries, including more than 220 chapters worldwide. In 2020, ISACA launched One In Tech, a philanthropic foundation that supports IT education and career pathways for under-resourced, under-represented populations.

Twitter: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews

Contacts

Emily Van Camp, evcamp@isaca.org, +1.847.385.7223
Kristen Kessinger, communications@isaca.org, +1.847.660.5512

Industry:

ISACA

Release Versions
English

Contacts

Emily Van Camp, evcamp@isaca.org, +1.847.385.7223
Kristen Kessinger, communications@isaca.org, +1.847.660.5512

More News From ISACA

2026 ISACA Awards Honor Exceptional Tech Professionals

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Every year, ISACA members and technology professionals around the globe demonstrate exceptional dedication and make remarkable impacts on their organizations, industries and communities. ISACA is honoring technology professionals in the areas of IT audit, risk, governance, privacy and cybersecurity with the 2026 Global Achievement Awards and Hall of Fame induction for their accomplishments and contributions in the professional tech community. The recipients of...

New ISACA Study: Privacy Teams Are Shrinking, Increasingly Stressed

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Privacy professionals are facing a data-dominated landscape, a complex web of regulations and more limited resources this year. According to the State of Privacy 2026 survey report from ISACA, these professionals are feeling increasingly strained, with 65 percent saying their roles are more stressful now compared to five years ago. This report, with insights gathered from more than 1,800 privacy professionals in the ISACA community worldwide, finds that respon...

ISACA Authorized as the CAICO for the US Department of War’s CMMC Program

WASHINGTON--(BUSINESS WIRE)--Global professional association ISACA—best known for its Certified Information Systems Auditor (CISA) and Certified Information Security Manager (CISM) certifications—has been authorized as the new and exclusive CMMC Assessor and Instructor Certification Organization (CAICO) for the Cybersecurity Maturity Model Certification (CMMC) program of the US Department of War (DoW). This means ISACA is the trusted credentialing leader to manage the training, examination, and...
Back to Newsroom