This page provides convenient access to some of our most frequently requested downloadable material. Each file is associated with a colored key that indicates the level of access required to download the document (see key legend below). The section links above the key legend provide direct access to the material that interests you.

File access may require you to log in or to be an ISACA member (Join now). If you do not already have a site login, you can obtain one free of charge by providing the required information. A new login can be created by following the links when you attempt to access a file that requires you to be logged in.

No Login Required: Login Required: Member Only:

COBIT-related & IT Governance - Top

COBIT is an IT governance framework and supporting tool set that allows managers to bridge the gap between control requirements, technical issues and business risks. COBIT enables clear policy development and good practice for IT control throughout organizations. COBIT was first published by  ITGI in April 1996.

ITGI’s latest update—COBIT^®  4.1—emphasizes regulatory compliance, helps organizations to increase the value attained from IT, highlights links between business and IT goals, and simplifies implementation of the COBIT framework.

Additional useful links:

• COBIT Online
• COBIT home page
• COBIT and related products available through the bookstore

Val IT - Top

Research - Top

The IT Governance Institute exists to assist enterprise leaders in their responsibility to make IT successful in supporting the enterprise's mission. ITGI delivers on this mission by undertaking original research to clarify and provide guidance on current and future issues pertaining to IT governance, audit, control and security. ISACA members benefit from this related entity through exclusive complimentary access to many research publications. Below are ITGI's most recent deliverables — in addition to the COBIT section above. For more information pertaining to research. Many more titles are available for purchase through the bookstore.

Standards, Guidelines and Procedures - Top

ISACA has long recognized that the specialized nature of information systems (IS) auditing and control, and the necessary skills, require standards that apply specifically to IS auditing and control. ISACA strives to advance globally applicable standards to meet this need which represents the cornerstone of ISACA's professional contribution. Guidelines and procedures provide detailed guidance on how to follow those standards. The download denoted as the 'Booklet' contains the complete collection of standards, guidelines and procedure. In addition, each individual document is available for download. More information on the standards program.

Information Systems Control Journal - Top

The Information Systems Control Journal is a bimonthly publication that provides professional development information to those spearheading IT governance and those involved with information systems audit, control and security. This leading industry publication is read by more than 65,000 professionals in over 155 countries around the world. This select audience includes members of ISACA, subscribers, university libraries worldwide, and copies circulated within organizations in diverse industries. Members benefit by receiving the Journal in print form as well as access to Journal content online. Learn more about the Journal by visiting its home page.

Global Communiqué - Top

Monthly ISACA member newsletter.

Webcasts - Top

Webcasts are just one method ISACA uses to inform and educate members, and is the most convenient mechanism for reaching our global constituents. The webcasts are presented by industry leaders, and offer a global perspective to the issues and challenges facing business today. While not downloadable, they represent an important online resource.

See the webcast offerings.

Certification - Top

ISACA has a long IT certification tradition and commitment to excellence. During its 20-year history, the Certified Information Systems Auditor (CISA) program has certified more than 60,000 individuals, and in its first three years, has certified over 6,200 individuals as a Certified Information Security Manager (CISM). For additional information on these programs visit the certification home page. Below are documents relevant to both aspiring certification candidates and those already certified.