This website is in active development — content and features are placeholder and subject to change.

Frameworks & Standards

The frameworks that run digital trust

ISACA builds the frameworks organizations use to govern technology, mature their capability and earn trust. Here's how the big three fit together — and how the chapter helps you put them to work.

COBIT

Governance & management of enterprise IT

Connect what IT does to what the business needs.

The globally adopted framework for the governance and management of enterprise information and technology — it turns strategy into governance objectives and gives leaders a common language for value, risk and resources.

The world's most widely used IT governance framework — trusted by enterprises and regulators alike.

What it helps you do

  • Align IT investment and delivery with business strategy
  • Balance value creation against risk and resource use
  • Meet regulatory, audit and compliance expectations
  • Measure performance against clear, tailorable objectives

CMMI

Capability Maturity Model Integration

Build capability that lasts — and prove it.

A proven, benchmarkable model for improving how an organization builds products, delivers services and manages performance. Appraised across defined maturity levels, CMMI shows exactly where you are and how to get better.

Adopted by thousands of organizations across more than 100 countries.

What it helps you do

  • Benchmark your maturity against a global standard
  • Improve delivery, quality and predictability
  • Guide a repeatable, evidence-based improvement path
  • Extend to cyber with the CMMI Cybermaturity Platform

DTEF

Digital Trust Ecosystem Framework

Engineer digital trust end to end.

ISACA's newest framework takes a holistic, systems-thinking view of digital trust — uniting security, privacy, quality, risk and ethics into one connected model instead of managing them in silos.

ISACA's flagship framework for the age of digital trust.

What it helps you do

  • See trust as an ecosystem, not disconnected controls
  • Connect the domains that actually create trust
  • Assess and strengthen your organization's trust posture
  • Align people, process and technology around trust

Put the frameworks to work

Chapter events, study groups and speakers help you apply COBIT, CMMI and DTEF in the real world — and earn CPE while you do it.