-
Introduction to IT Audit
This article is an introduction to IT/IS (information systems) audits. -
What is the importance of GRC? Governance, Risks and Compliance in Organisations

Resumo: Introduรงรฃo aos conceitos de GRC (Governanรงa, Riscos e Conformidade).
Palavras chaves: GRC. Governanรงa corporativa. Gestรฃo de riscos. Gestรฃo. Conformidade. Compliance.
A complexidade das relaรงรตes negociais das organizaรงรตes tรชm crescido exponencialmente nas รบltimas dรฉcadas. Por outro lado, casos de fraude de alcance mundial como aqueles ocorridos com as empresas Enron e Worldcom nos Estados Unidos da Amรฉrica (EUA) em 2002,
-
Conducting security audits using COBITยฎ 5, ISO 27001:2013 and the NIST Cibersecurity framework

For ISACAยฎ, a hot topic in the area of auditing is cyber security. In fact, it is difficult not to find every week a news related to cyber attacks, theft of corporate information or new viruses that threaten the standard operations of organizations.
-
A nova ediรงรฃo 2017 COSO ERM -Integrating with Strategy and Performance

Resumo: Uma introduรงรฃo รก historia da obra COSO e a sua nova ediรงรฃo 2017 COSO ERM -Integrating with Strategy and Performance.
Birth of the COSO organisation
O Comitรช das Organizaรงรตes Patrocinadoras (COSO) (The Committee of Sponsoring Organizations of the Treadway Commission, em inglรชs), criado em 1985, estuda fatores que podem levar ร geraรงรฃo de relatรณrios fraudulentos e elabora frameworks e recomendaรงรตes para as empresas e seus auditores em gestรฃo de riscos, controle interno e detenรงรฃo de fraudes.
-
Introduction to IT Audit

According to the IIA (The Institute of Internal Auditors) (1), there are several types of audits that can be performed; an audit can be financial, operational (SOC 1, 2, and 3), integrated (SAS-94), compliance, administrative, and information systems; the latter being the focus of this text.

