Securing an IT Organization through Governance, Risk Management, and Audit

Ken Sigler is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills Michigan campus of Oakland Community College and the chair of the Campus Senate. His primary research is in the area of software management, software assurance, and cybersecurity. He has authored several books on the topic of cybersecurity ICT management and developed the college's CIS program option Information Technologies for Homeland Security, which has a recognized relationship with the Committee on National Security Systems. Sigler serves as the liaison for the college as one of three founding members of the International Cybersecurity Education Coalition (ICSEC), which is now the Midwest chapter for CISSE.James L. Rainey, III, DMIT, is an IT specialist with the U.S. government where he works on technical project documentation within the SDLC. Dr. Rainey holds an MS degree in computer and information systems and did a tour with the Department of Defense where he earned a citation for his work. Dr. Rainey has also worked as a UNIX system administrator, SAP basis administrator, and enterprise and infrastructure architect. Additionally, he worked at Comerica Bank's Data Center in Auburn Hills, Michigan, as a developer and taught at the University of Detroit Mercy's Computer and Information Systems Department for 10 years as an adjunct.

• Cybersecurity Risk Management. Introduction to the Framework for Improving Critical Infrastructure. Identify Function. Protect Function. Detect Function. Respond Function. Recover Function. The COBIT Framework. Decomposition of Framework. Framework Structure's Generic Domains. Decomposition of COBIT 5. COBIT Management Guidelines. COBIT Management Dashboard. What COBIT Sets Out to Accomplish. Internal Audits. Tying It All Together. References.