isaca關于it風險管理的框架 risk it framework

1、Principles Process Details Management Guidelines Maturity ModelsTHE RISK IT FRAMEWORK THE RISK IT FRAMEWORK3 © 2 0 0 9 I S A C A . A L L R I G H T S R E S E R V E D .ACKNOWLEDGEMENTSISACA wishes to recognise:

2、 Development Team Dirk Steuperaert, CISA, CGEIT, IT In Balance BVBA, Belgium, Chair Steven De Haes, Ph.D., University of Antwerp Management School, Belgium Gert du Preez, CGEIT, PricewaterhouseCoopers, Belgium Rachel Mas

3、sa, CISSP , PricewaterhouseCoopers LLP , USA Bart Peeters, PricewaterhouseCoopers, Belgium Steve Reznik, CISA, PricewaterhouseCoopers LLP , USAIT Risk Task Force (2008-2009) Urs Fischer, CISA, CIA, CPA (Swiss), Swiss Lif

4、e, Switzerland Steven Babb, CGEIT, KPMG, UK Brian Barnier, CGEIT, ValueBridge Advisors, USA Jack Jones, CISA, CISM, CISSP , Risk Management Insight LLC, USA John W. Lainhart IV , CISA, CISM, CGEIT, IBM Business Consultin

5、g Services, USA Gladys Rouissi, CISA, MComp, Commonwealth Bank of Australia, Australia Lisa R. Y oung, CISA, CISSP , Carnegie Mellon University, USAExpert Reviewers Mark Adler, CISA, CISM, CGEIT, CFE, CFSA, CIA, CISSP ,

6、Commercial Metals, USA Steven Babb, CGEIT, KPMG, UK Gary Baker, CGEIT, CA, Deloitte and Touche LLP , Canada Dave H. Barnett, CISM, CISSP , CSDP , CSSLP , Applied Biosystems, USA Brian Barnier, CGEIT, ValueBridge Advisors

7、, USA Laurence J. Best, PricewaterhouseCoopers LLP , USA Peter R. Bitterli, CISA, CISM, Bitterli Consulting AG, Switzerland Luis Blanco, CISA, Citibank, UK Adrian Bowles, Ph.D., Sustainability Insights Group (SIG411), US

8、A Dirk Bruyndonckx, CISA, CISM, CGEIT, MCA, KPMG Advisory, Belgium Olivia Xardel-Burtin, Grand Duchy of Luxembourg M. Christophe Burtin, Grand Duchy of Luxembourg Rahul Chaurasia, Student, Indian Institute of Informatio

9、n Technology, India Philip De Picker, CISA, MCA, Nationale Bank van Belgie, Belgium Roger Debreceny, Ph.D., FCPA, University of Hawaii-Manoa, USA Heidi L. Erchinger, CISA, CISSP , System Security Solutions Inc., USA Robe

10、rt Fabian, Ph.D., I.S.P ., Independent Consultant, Canada Urs Fischer, CISA, CIA, CPA (Swiss), Swiss Life, Switzerland Shawna Flanders, CISA, CISM, ACS, PSCU Financial Services, USA John Garms, CISM, CISSP , ISSEP , Elec

11、tric-Tronics Inc., USA Dennis Gaughan, AMR Research, USA Yalcin Gerek, CISA, CGEIT, TAC, Turkey Edson Gin, CISA, CFE, CIPP , SSCP , USA Pete Goodhart, PricewaterhouseCoopers LLP , USA Gary Hardy, CGEIT, IT Winners, South

12、 Africa Winston Hayden, ITGS Consultants, South Africa Jimmy Heschl, CISA, CISM, CGEIT, KPMG, Austria Monica Jain, CGEIT, CSQA, CSSBB, USA Jack Jones, CISA, CISM, CISSP , Risk Management Insight LLC, USA Dharmesh Joshi,

13、CISA, CGEIT, CA, CIA, CISSP , CIBC, Canada Catherine I. Jourdan, PricewaterhouseCoopers LLP , USA Kamal Khan, CISA, CISSP , MBCS, Saudi Aramco, Saudi Arabia Marty King, CISA, CGEIT, CPA, BCBSNC, USA Terry Kowalyk, Credit

14、 Union Deposit Guarantee Corp., Canada Denis Labhart, Swiss Life, Switzerland John W. Lainhart IV , CISA, CISM, CGEIT, IBM Business Consulting Services, USA Philip Le Grand, Datum International Ltd., UK Bjarne Lonberg, C

15、ISSP , A.P . Moller—Maersk, Denmark Jo Lusk, CISA, Federal Government, USA Charles Mansour, CISA, Charles Mansour Audit and Risk Service, UK Mario Micallef, CGEIT, CPAA, FIA, Ganado & Associates, Malta Jack Musgrove