ISACA's New Azure Audit Program Focuses on a Leading Cloud Service Provider

Schaumburg, Ill. (Aug. 13, 2020) — Cloud computing has become a business imperative for its speed, flexibility and scale, but enterprises must have strategic maintenance programs in place and periodically assess this widely adopted technology. Global association ISACA has developed a Microsoft® Azure Audit Program to guide auditors as they assess the adequacy and effectiveness of this leading cloud service provider's services and ensure that the Azure implementation securely supports operational and compliance objectives.

 

The Azure Audit Program assists auditors in their assessments of whether the enterprise's use of Azure services supports achievement of strategic objectives through covering the following areas:

 

  • Governance
  • Network configuration and management
  • Identity and access management
  • Resource security
  • Logging and monitoring
  • Security incident response
  • Data encryption controls

 

Observations resulting from an audit of Azure helps remind enterprises of their responsibilities and helps them avoid potential adverse business outcomes (either financial or reputational). For example, the ramifications of not being able to address data integrity or continue operations during a data center outage could range from:

 

? Noncompliance due to failure to secure data in accordance with required legislation or other external expectations.
? Inability to process or store transactions securely.

 

"The benefits of cloud computing make it a must-have technology, but there are certainly still risks to assess and mitigate," says Adam Kohnke, Global Identity & Access Management Team Leader of QBE North America, and lead developer of the program. "There must be a strategic maintenance program and comprehensive business continuity plan in place and having an audit program as part of this plan is essential."

 

The Azure Audit program is free for ISACA members and $49 for non-members. Learn more and access the program at www.isaca.org/bookstore/audit-control-and-security-essentials/waazu. Find additional audit programs from ISACA, including the recently published AWS Audit Program and CCPA Audit Program, at www.isaca.org/resources/insights-and-expertise/audit-programs-and-tools.

 

About ISACA

For more than 50 years, ISACA (www.isaca.org) has advanced the best in technology. ISACA equips individuals with knowledge, credentials, education and community to progress their careers and transform their organizations. Through the CSX, COBIT and CMMI solutions, ISACA enables enterprises to train and build quality teams. ISACA is a global professional association and learning organization that leverages the expertise of its 145,000 members who work in information and cybersecurity, governance, assurance, risk and privacy to drive innovation through technology. It has a presence in 188 countries, including more than 223 chapters worldwide.

 

Twitter: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews