New Book from ISACA Offers Guidance on Cybercrime Prevention and Incident Response

Rolling Meadows, IL, USA (24 May 2005)—As the amount of business and personal information housed in information systems rapidly increases, it becomes more vulnerable to cybercrime attacks that can jeopardize the integrity, reputation and existence of an enterprise.

Cybercrime: Incident Response and Digital Forensics, released today by the Information Systems Audit and Control Association (ISACA), offers guidance on how to avoid, prepare for and recover from such attacks. The book provides details on developing and implementing an incident response plan, basic elements for a successful digital forensics investigation, and how global regulations are addressing cybercrime risks.

The book also lists important questions board members must ask about cyberattacks, including:
· What is the amount of risk acceptable to the organization?
· Have sufficient resources been allocated to address preparation for and response to cyberattacks?
· How quickly can the enterprise respond to a cyberattack?
· Has a cybercrime program been designed, and is it implemented and updated annually?

“It is crucial to ask these questions and to have a well-developed incident response plan,” said Robert Schperberg, CISM, the author of Cybercrime and vice president at TeleDesign Security Inc. “Cyberattacks can have an immediate and catastrophic impact on an organization. They are especially devastating to organizations that are not prepared.”

Cybercrime: Incident Response and Digital Forensics is available at the ISACA Bookstore (www.isaca.org/bookstore) for US $55.

About ISACA
With more than 47,000 members in more than 100 countries, the Information Systems Audit and Control Association® (ISACA®) (www.isaca.org) is a recognized worldwide leader in IT governance, control, security and assurance. Founded in 1969, ISACA sponsors international conferences, publishes the Information Systems Control Journal®, develops international information systems auditing and control standards, and administers the globally respected Certified Information Systems Auditorâ„? (CISA®) designation, earned by more than 40,000 professionals since inception, and the Certified Information Security Manager® (CISM®) designation, a groundbreaking credential earned by 5,100 professionals in its first two years.