-

New COBIT for DevOps Audit Program from ISACA Provides Guidance for DevOps Activities

Audit program is a companion to COBIT Focus Area: DevOps Using COBIT® 2019

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Audit and related practitioners know that there are business risks associated with DevOps practices—including insufficient assurance and inadequate planning, deployment, continuous monitoring and management of DevOps processes. The new COBIT for DevOps Audit Program from ISACA leverages concepts and guidance that DevOps teams can adopt to help them realize the benefits of DevOps while mitigating its risks.

Designed to accompany the COBIT Focus Area: DevOps Using COBIT® 2019 publication, the COBIT for DevOps Audit Program gives enterprises a tool to evaluate management practices relevant to developing an effective governance system over DevOps.

The COBIT for DevOps Audit Program is built on the four COBIT management domains and associated objectives, Align, Plan and Organize; Build, Acquire and Implement; Deliver, Service and Support; and Monitor, Evaluate and Assess. The program details testing steps for DevOps-specific activities outlined in the COBIT DevOps Focus area, aiding the audit process for organizations using COBIT and DevOps.

“It is important for management to take time to evaluate the effectiveness of their organization’s DevOps activities to ensure they are keeping their governance system strong to mitigate risk,” says Lisa Villanueva, ISACA principal, IT governance professional practices. “Assessing a DevOps governance system through the lens of COBIT concepts can be an effective approach for auditors.”

Villanueva writes further on this new audit program in a new blog post for ISACA Now at https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2022/evaluating-governance-over-devops-practices.

COBIT for DevOps Audit Program is available at https://store.isaca.org/s/store#/store/browse/detail/a2S4w000005E8ecEAC and costs US $25 for members and $49 for nonmembers. Additional audit resources can be found at https://www.isaca.org/resources/it-audit.

About ISACA

For more than 50 years, ISACA® (www.isaca.org) has advanced the best talent, expertise and learning in technology. ISACA equips individuals with knowledge, credentials, education and community to progress their careers and transform their organizations, and enables enterprises to train and build quality teams. ISACA is a global professional association and learning organization that leverages the expertise of its more than 150,000 members who work in information security, governance, assurance, risk and privacy to drive innovation through technology. It has a presence in 188 countries, including more than 220 chapters worldwide. In 2020, ISACA launched One In Tech, a philanthropic foundation that supports IT education and career pathways for under-resourced, under-represented populations.

Twitter: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews

Contacts

Emily Van Camp, evcamp@isaca.org, +1.847.385.7223
Kristen Kessinger, communications@isaca.org, +1.847.660.5512

Industry:

ISACA

Release Versions
English

Contacts

Emily Van Camp, evcamp@isaca.org, +1.847.385.7223
Kristen Kessinger, communications@isaca.org, +1.847.660.5512

More News From ISACA

Four Ways to Incorporate AI into Threat Intelligence Programs

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Threat environments have become more complex, especially with the rise of generative AI and the rapid commercialization of the cybercrime ecosystem. Enterprises have also long struggled to realize meaningful value from traditional cyberthreat intelligence programs. However, there are steps that cybersecurity professionals can take to improve the effectiveness of their threat intelligence programs, as outlined in ISACA’s new white paper, Building a Threat-Led C...

AI-Driven Cyber Threats Are the Biggest Concern for Cybersecurity Professionals Going Into 2026, Finds New ISACA Research

LONDON--(BUSINESS WIRE)--Over half (51%) of European IT and cybersecurity professionals fear AI-driven cyber threats and deepfakes will keep them up at night next year, according to new ISACA research. What’s driving this concern is a lack of preparedness for AI-related risks across the industry. Only 14% of respondents feel their organisation is very prepared to manage the risks associated with generative AI solutions in 2026. The majority (82%) feel they are only somewhat prepared, not very p...

From Ransomware to AI Risk: New ISACA Research Identifies What Will Keep Tech Pros Up at Night in 2026

SCHAUMBURG, Ill.--(BUSINESS WIRE)--As they look ahead to 2026, more than half of digital trust professionals (59 percent) are expecting that AI-driven cyber threats and deepfakes will keep them up the most at night next year, according to ISACA’s 2026 Tech Trends & Priorities Pulse Poll. Also anticipated to keep them up at night are thoughts of irreparable harm caused by failure to detect/respond to a breach (36 percent) and insider threats and human error (35 percent), finds the inaugural...
Back to Newsroom