brand guidelines - shamrockresource.com...isaca brand guidelines | 4 2. isaca brand positioning...

Brand GuidelinesFOR ISACA AND RECOGNIZED ISACA CHAPTERSMay 2014

ISACA Brand Guidelines | 2

Table of Contents

1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

2. ISACA Brand Positioning . . . . . . . . . . . . . . . . . . . . . . 4

The ISACA Brand Philosophy . . . . . . . . . . . . . . . . . . . . 4 About Us . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Our Mission . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Our Vision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Our Tagline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Our Key Message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Our Value Propositions . . . . . . . . . . . . . . . . . . . . . . . . . 5

3. Brand Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

ISACA Signature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Signature Color Usage . . . . . . . . . . . . . . . . . . . . . . . . 7 Signature Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Proper Use of Signature . . . . . . . . . . . . . . . . . . . . . . . 9 Improper Use of Signature . . . . . . . . . . . . . . . . . . . . 10 ISACA Chapter Signature . . . . . . . . . . . . . . . . . . . . . 12 Signature Placement . . . . . . . . . . . . . . . . . . . . . . . . 14 Signature Clear Space . . . . . . . . . . . . . . . . . . . . . . . 15 Signature Minimum Size Requirements . . . . . . . . . . . 15

ISACA Tagline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16

ISACA Color Palette . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Typography . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18 Typographic Style . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Photography . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20 Acceptable Photography Style . . . . . . . . . . . . . . . . . 21

Video Production . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

4. Product Brand Elements . . . . . . . . . . . . . . . . . . . . . .25

Product Brands Overview . . . . . . . . . . . . . . . . . . . . . . .25

ISACA Chapter Product Logo Usage . . . . . . . . . . . . . .26

Certification Programs Branding . . . . . . . . . . . . . . . . . .27 Certification Logo Formats . . . . . . . . . . . . . . . . . . . . 27 Proper Use of Certification Logos . . . . . . . . . . . . . . 30 Improper Use of Certification Logos . . . . . . . . . . . . . 31 Certification Logo Clear Space . . . . . . . . . . . . . . . . 33 Certification Logo Minimum Size Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Certification Programs Color Palette . . . . . . . . . . . . 34

COBIT® 5 Branding . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 COBIT® 5 Logo . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Proper Use of COBIT® 5 Logo . . . . . . . . . . . . . . . . . 36 Improper Use of COBIT® 5 Logo . . . . . . . . . . . . . . . 37 COBIT® 5 Logo Clear Space . . . . . . . . . . . . . . . . . . 39 COBIT® 5 Logo Minimum Size Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 39 COBIT® 5 Color Palette . . . . . . . . . . . . . . . . . . . . . . 40

Cybersecurity NexusTM Branding . . . . . . . . . . . . . . . . . . . . 41 Cybersecurity NexusTM Logo . . . . . . . . . . . . . . . . . . 41 Color and Printing Restrictions . . . . . . . . . . . . . . . . . 42 Cybersecurity NexusTM Event Branding . . . . . . . . . . 43 Proper Use of Cybersecurity NexusTM Logo . . . . . . . 43 Improper Use of Cybersecurity NexusTM Logo . . . . . 44 Cybersecurity NexusTM Logo Clear Space . . . . . . . . 46 Cybersecurity NexusTM Logo Minimum Size Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Cybersecurity NexusTM Color Palette . . . . . . . . . . . . 47

Conference Branding . . . . . . . . . . . . . . . . . . . . . . . . . 48 Conference Logos . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Proper Use of Conference Logos . . . . . . . . . . . . . . . 59 Improper Use of Conference Logos . . . . . . . . . . . . . 50

Logo Co-branding . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Certification Logo and ISACA Co-branding . . . . . . . 53 COBIT® 5 Product Co-branding . . . . . . . . . . . . . . . 54 Cybersecurity NexusTM Product Co-branding . . . . . 55 Cybersecurity NexusTM Product Covers . . . . . . . . . . 56 Conference Logo and ISACA Co-branding . . . . . . . 57

5. Brand Application . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Stationery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58 Headquarter Stationery Specifications . . . . . . . . . . . 58 Chapter Stationery Specifications . . . . . . . . . . . . . . 58

E-mail Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

PowerPoint Templates . . . . . . . . . . . . . . . . . . . . . . . . 61

Research Materials . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Publication Covers . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Whitepaper and Survey Results Covers . . . . . . . . . . 63

Advertising . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Print Advertising . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Print Brochures and Direct Mail . . . . . . . . . . . . . . . . 65 Web Banners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Web landing pages . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

6. Writing for the ISACA Brand . . . . . . . . . . . . . . . . . . 68

ISACA Voice and Tone . . . . . . . . . . . . . . . . . . . . . . . . 68 US Vs . UK English . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Hierarchy of Information . . . . . . . . . . . . . . . . . . . . . . 68 Scanability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Copywriting Standards . . . . . . . . . . . . . . . . . . . . . . . . 70 Writing resources . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Standard written formats . . . . . . . . . . . . . . . . . . . . . 71


The purpose of this Brand Identity Manual is to create a unified visual identity for the ISACA brand . This manual provides specific rules and guidelines to the ISACA community that will help to build brand awareness .

In this manual you will find organization-wide identity and design standards for ISACA, its products and services, and recognized ISACA chapters .

Every member of the ISACA community plays an important role in ensuring the cohesive identity is applied consistently in all internal and external communications, including but not limited to print, web and electronic formats .

ISACA TRADEMARK AND IP GUIDELINES

ISACA administers, maintains and enforces Intellectual Property Guidelines designed to facilitate the dissemination and acceptance of ISACA Intellectual Property while also protecting it and the reputation of ISACA and its publications and research worldwide . ISACA’s reputation as a recognized global leader in content that ensures trust in, and value from, information and information systems has led professionals and enterprises to look to ISACA as a trusted provider of guidelines and good practices for governance, management, security, risk management and assurance of IT-based solutions and services; highly valued certifications; education and training; and thought-leading research . As a result, ISACA’s brands have become valuable assets representing the excellence and quality of ISACA’s products and services in the global marketplace .

For additional information on IP usage and guidelines, please reference ISACA’s IP handbook in the Brand Guidelines folder on the T drive .

QUESTIONS?

This guide has been prepared by the ISACA Marketing Department .

Should you have any questions regarding the content, please contact the ISACA Marketing Department at [email protected].

1. Introduction


2. ISACA Brand Positioning

ABOUT US

With more than 115,000 constituents in 180 countries, ISACA® helps business and IT leaders build trust in, and value from, information and information systems . Established in 1969, ISACA is the trusted source of knowledge, standards, networking, and career develop-ment for information systems audit, assurance, security, risk, privacy and governance professionals .

ISACA offers the Cybersecurity Nexus™, a comprehen-sive set of resources for cybersecurity professionals, and COBIT®, a business framework that helps enterprises govern and manage their information and technology . ISACA also advances and validates business-critical skills and knowledge through the globally respected Certified Information Systems Auditor® (CISA®), Certified Information Security Manager® (CISM®), Certified in the Governance of Enterprise IT® (CGEIT®) and Certified in Risk and Information Systems Control™ (CRISC™) credentials . The association has more than 200 chapters worldwide .

Participate in the ISACA Knowledge Center: isaca.org/knowledge-center

Follow ISACA on Twitter: https://twitter.com/ISACANews

Join ISACA on LinkedIn: ISACA (Official), http://linkd.in/ISACAOfficial

Like ISACA on Facebook: facebook.com/ISACAHQ

About the IT Governance Institute

The IT Governance Institute® (ITGI®) (itgi.org) is a nonprofit, independent research entity that provides guidance for the global business community on issues related to the enterprise governance of IT assets . ITGI was established by the nonprofit membership associa-tion ISACA in 1998 .

OUR MISSION

For professionals and organizations be the leading global provider of knowledge, certifications, community, advocacy and education on information systems assurance and security, enterprise governance of IT, and IT-related risk and compliance .

OUR STRATEGIC ASPIRATION

Global leadership in educating, training and informing professionals and enterprises in the area of trust in information and information systems . We will continue to research and create the knowledge that our core constituents need to succeed in the coming decade and beyond, plus we will reach out to other professionals who may find value in our practical education on building trust within their domains .

OUR TAGLINE

Trust in, and value from, information systems.

The ISACA Brand Philosophy


Our Key MessageISACA is a global association that builds trust in, and value from, information systems . Established over 45 years ago, ISACA is a trusted source of knowledge, networking, education and career development for audit, assurance, risk, security, control, privacy and governance professionals . Through our worldwide community, ISACA inspires and equips individuals to be more capable, valued and successful in the fast-changing world of information systems, information technology and business .

Our Value Propositions

Member Value

Members rely on ISACA for resources that enhance their skills, expand their professional knowledge and connect them with a vibrant community of peers . Many professionals worldwide consider membership in ISACA essential to their ongoing education, career progression and value delivery to their enterprises .

Enterprisewide Value

Given the growing complexities of global competition, ever-increasing risk and the need to demonstrate compliance, enterprises must take a systemic approach to governing their information systems . ISACA certifications, education, research, standards, frameworks and professional communities help enterprises balance the risks and rewards from their information systems .

Industry Value

ISACA provides practical guidance, benchmarks and other effective tools for all enterprises that use information systems . Through its comprehensive guidance and services, ISACA defines the roles of information systems governance, security, audit and assurance professionals worldwide . The COBIT® 5 framework for the governance and management of enterprise IT and the Certified Information Systems Auditor (CISA®), Certified Information Security Manager (CISM®), Certified in the Governance of Enterprise IT (CGEIT®) and Certified in Risk and Information Systems Control (CRISCTM) certifications are ISACA brands respected and used by these professionals for benefit of their enterprise .

Global Value

With members residing in more than 180 countries, ISACA is internationally recognized as a high-performing organization that addresses global, national and local information systems and business issues . Subject matter experts from around the world contribute to the development of ISACA’s thought-leading knowledge, certifications, education and research .

2. ISACA Brand Positioning


ISACA SignatureISACA’s signature (starburst symbol, name and tagline) is a symbol of how much the association has achieved in the past and where it is going in the future . Our signature represents our position as a leading global provider of knowledge, certifications, community, advocacy and education .

The ISACA signature or any of its elements should never be recreated, modified (except for sizing) or enhanced in any way . When used, the starburst symbol should never be without the name, or the name without the starburst symbol .

While it is preferred that the signature with tagline—Trust in, and value from, information systems—be used, the signature can be used without the tagline in certain situations where it may be too small for the tagline to be legible and provided that it is one of the approved ISACA signatures .

The ISACA signature as shown below is authorized for use only by ISACA International Headquarters . Recognized ISACA chapters must use the ISACA chapter signature files provided by International Headquarters .

The registered trademark symbol (®) is a legal component of the ISACA signature and must always be present to protect our identity . When resizing the signature, please consider the context and use your best judgment to determine the appropriate size of the symbol .

Starburst Symbol

Name

Registered Trademark Symbol

Tagline

3. Brand Elements

If you require assistance, please contact ISACA’s Marketing Department, [email protected] .

For additional information on ISACA Trademark usage and or guidelines, please reference ISACA’s IP Handbook in the Brand Guidelines folder on the T drive .


3. Brand Elements

SIGNATURE COLOR USAGE

The primary form of the ISACA signature is created using two colors: ISACA Maroon (for the Starburst) and ISACA Dark Gray (for the name and tagline) . Color formulas for various applications of these colors are detailed below .

ISACA Maroon

ISACA Maroon PMS 208

ISACA Maroon Red: 163 Green: 0 Blue: 70

ISACA Dark Gray PMS 431

ISACA Dark Gray Red: 106 Green: 116 Blue: 125

ISACA Dark Gray

Two-Color printing using Pantone colors

When reproducing the signature using Pantone (PMS) inks, use PMS 208 (maroon) and PMS 431 (dark gray) . Never substitute other PMS colors for the ones specified here .

CMYK Formula for print application

When reproducing ISACA signature in four-color process (cyan, magenta, yellow and black, or CMYK), the signature colors should be created using the following formulas:

RGB Formula

When reproducing ISACA signature in RGB (such as on a website or PowerPoint presentation), the signature colors should be created using the following formulas:

Web-Safe Hex Formula

When creating the signature colors on a website using Hex color codes for the web, email or e-blasts, use the following codes:

ISACA Maroon Cyan: 0% Magenta: 100% Yellow: 35% Black: 37%

ISACA Maroon Hex: A3 00 46

ISACA Dark Gray Cyan: 11% Magenta: 0% Yellow: 0% Black: 65%

ISACA Dark Gray Hex: 6A 74 7C


SIGNATURE FORMATS

The ISACA Brand Signature may be used in color, black, or reversed to white, and may be used with or without the tagline . Refer to the guidelines below to determine which logo is appropriate for each use .

3. Brand Elements

Color Signature

This is the preferred signature format . Use the color signature when a piece will be printed in color or appear digitally, and when the color signature can be seen clearly on the background on which it is are placed . The tagline should be included whenever possible, but if the signature is used smaller than one and a quarter inches (1 .25”) wide, use the version without the tagline .

Black Signature

Use this signature when the communication piece is being printed only in black, or when the signature must appear on a background against which the ISACA colors cannot be seen clearly . The tagline should be included whenever possible, but if the signature is used smaller than one and a quarter inches (1 .25”) wide, use the version without the tagline . The black signature should always be used at 100% black, not a percentage or gray .

Signature Reversed to White

Use this signature on dark or patterned backgrounds against which neither the color nor the black signature can be clearly seen . The tagline should be included whenever possible, but if the signature is used smaller than one and a quarter inches (1 .25”) wide, use the version without the tagline .

All forms of the ISACA logo can be found on the T drive in the ISACA Brand Guidelines folder . For more information on minimum signature size requirements, see page 15 .


3. Brand Elements

PROPER USE OF SIGNATURE

DO use the color signature on white or light-colored backgrounds .

DO use the black signature on white or light-colored backgrounds, or when the communication piece is printed only in black .

DO use the signature reversed to white on black or dark-colored backgrounds .


DO NOT re-create the tagline or set it in a different typeface .

DO NOT distort the signature . You may scale the signature up and down but the proportions must always remain the same .

Trust in, and value from, information systems

IMPROPER USE OF SIGNATURE

DO NOT place the color signature on black or dark-colored backgrounds, or on patterns, against which the signature can not be easily seen .

DO NOT change any of the colors in the signature .

3. Brand Elements


IMPROPER USE OF SIGNATURE (CONTINUED)

3. Brand Elements

DO NOT orient the signature vertically or on a diagonal, in relationship to the page or layout .

DO NOT give the signature a drop shadow or glow effect .

DO NOT crop the signature in any way .

DO NOT use the signature in a sentence or headline .

Become a member of today!


Should you have any questions regarding the content, or for additional information on ISACA’s Trademark usage and guidelines please contact the ISACA Marketing Department at [email protected] .

3. Brand Elements

ISACA CHAPTER SIGNATURE

The ISACA chapter signature (for use by recognized chapters) is made up of the same elements (the starburst symbol, name and tagline) as the ISACA signature with the addition of the chapter name . All applications of ISACA chapter signatures should utilize the files provided by ISACA International Headquarters . Do not attempt to re-create, modify (except for sizing) or enhance the files in any way .

While it is preferred that the signature with tagline—Trust in, and value from, information systems—be used, the signature can be used without the tagline in certain situations where it may be too small for the tagline to be legible and provided that it is one of the approved ISACA signatures . For more information on minimum signature size requirements, see page 15 .

Your chapter logo (as provided by ISACA International Headquarters) must be displayed on your chapter web site . The only acceptable use of a chapter logo (as sent to each chapter by ISACA International HQ) is shown below .

Helvetica Neue, 21 point, ISACA Maroon

Starburst Symbol

Name

Registered Trademark Symbol

Tagline


3. Brand Elements

Chapter Signature Usage Guidelines

• For print, please use a high resolution TIF or JPG file .

• For screen, please use a JPG or GIF file .

• Always use the electronic or hard copy reproduction art provided to reproduce the ISACA signature—scanning, redrawing, stretching or changing the signature in any way is not permitted .

• Keep all elements of the signature together . The ISACA starburst must not be used on its own without permission (see page 6) .

• The logo should never be smaller than five-eighths ( .625”) wide . When enlarging or reducing the full signature, do so proportionately (see page 15) .

• Always position the signature in a clear area free from other text and graphics with ample white space surrounding it (see page 15) .

• Wherever possible, the ISACA logo should always be used in four-color on a white background (see page 7) .

• On a color background, it is permissible to use the ISACA signature in all white only (see page 8) .

• In instances where four-color printing is not available, it is permissible to use the ISACA signature in all black only (see page 8) .

For a scalable vector graphic, please contact ISACA’s Marketing Department at [email protected] .


SIGNATURE PLACEMENT

The ISACA signature may be placed in any of the four corners of a layout, depending on where it looks best in the design . Some examples are shown below .

3. Brand Elements

YOU HAVE THE TALENT. WE MAKE YOU AN ASSET. DISCOVER HOW AN ISACA® MEMBERSHIP CAN HELP YOU ADVANCE YOUR CAREER.

BE MORE

“I WORK IN A FAST-CHANGING FIELD.

WHEN CHANGE HAPPENS,ISACA TALKS ABOUT IT FIRST.”

www.isaca.org/membership

— ROSEMARY AMATO, CISA DIRECTOR, DELOITTE AMSTERDAM, THE NETHERLANDS ISACA MEMBER SINCE 1998

AN ISACA Cloud VISIoN SerIeS WHITe PAPer

Security

aS a Service: Business BenefitsWith Security, Governanceand Assurance Perspectives

enterprises need to protect their assets, but

they also need to be profitable to stay in business. Protecting information assets has

become a priority for enterprises that need to meet compliance requirements or need to protect sensitive data. The challenge for these enterprises is implementing robust security practices while keeping investment and operational cost contained. SecaaS offers a way for enterprises to access security services that are robust, scalable and cost effective. With reward comes risk, and enterprises should consider benefits and risk when evaluating SecaaS products and providers. Above all, enterprises need to understand that they can outsource responsibility but they can’t outsource accountability; therefore, enterprises should implement an assurance plan that includes assessing the services

obtained from SecaaS providers. When an audit is not possible, enterprises must still obtain proof that controls used

to protect enterprise information assets are working effectively.

Security aS a Service: Business BenefitsWith Security, Governanceand Assurance Perspectives


SIGNATURE CLEAR SPACE

When placing the ISACA signature, the proper clear space between it and any other design elements, or the edge of the page, must be maintained . The clear space is equivalent to the height of the letters in ISACA, as described below .

X

To determine the clear space, measure the height of the letters in ISACA . We’ll call this “X” .

Make sure that the proper clear space (“X”) is always maintained between the signature and any other design elements of the edge of the page .

X

X

X

3. Brand Elements

SIGNATURE MINIMUM SIZE REQUIREMENTS

If the ISACA signature is used smaller than one and a quarter inches (1 .25") wide, the version without the tagline must be used . This is to prevent the tagline from being unreadable . The signature without the tagline must not be used smaller than five-eighths ( .625") wide . The signature should only be used this small when absolutely necessary, such as on a small item (pencil or small giveaway) or in a co-branding situation where many logos appear very small .

1 .25” wide .625”

Smallest size for signature with tagline

Smallest size for signature; signature without tagline used


ISACA TaglineAs mentioned on page 7, the preferred version of the signature includes the ISACA tagline . In cases where the signature is used smaller than an inch and a quarter (1 .25") wide, the version without the tagline is used . If you would like to include the tagline on a piece but the logo must be used small, the tagline may be added as a separate piece of art . Artwork for this separate tagline is included in the toolkit and must not be altered . The tagline may be used in ISACA Dark Gray, black, or reversed to white, as shown below .

TAGLINE USAGE AND PROXIMITY

Use the tagline on its own when space does not allow for the signature to be reproduced larger than 1 .25" wide . The tagline must be used no taller than the signature, and must be placed so that it associated with the signature, as shown in the examples below .

3. Brand Elements

Tagline in ISACA Dark Gray

In this example, the signature must be used in a very thin, long area (such as a pencil or small book spine) . Because there are no other design elements, the signature may be used on the end opposite the tagline .

In the example at left, a hypothetical small card bearing information, the signature is used one inch wide, and therefor must be used without the tagline . The tagline may be added next to the signature, at a small size . Note that the signature clear space is maintained between the signature and tagline, and between the signature and edge of the page .

Tagline in black

Tagline reversed to white

Sample Copy Here!Oste nonseni tasitia volorum, sit atem fuga . Evellibus nus es modit maxim explaut pellate core cuptaspero beatiatat . Ut aut aboreperrum eostest aud .


ISACA Color PaletteThe two primary colors of ISACA are those used in the signature, ISACA Maroon and ISACA Dark Gray . The use of these colors as they pertain to the signature are detailed on page 7, and the color formulas for reproducing them in various formats are listed below .

SECONDARY PALETTE

Three more colors may be used for ISACA corporate communications . Each color is also assigned to one of our business units, for primary use on their communications, as listed below . Membership’s primary color is ISACA Maroon .

3. Brand Elements

Pantone (PMS) PMS 208


RGB (screen color) Red: 163 Green: 0 Blue: 70








Four-Color (CMYK) Cyan: 0% Magenta: 100% Yellow: 36% Black: 37%


Hex (web-safe color) Hex# A3 00 46

Hex (web-safe color) Hex# 00 8D A8




Hex (web-safe color) Hex# 6A 74 7C

Hex (web-safe color) Hex# 52 61 AC

Hex (web-safe color) Hex# 00 7D C3

ISACA Maroon

Research: Teal

ISACA Dark Gray

Education: Periwinkle

Publications: Blue

For colors associated with individual products, see section 4, starting on page 34 .


Typography

PRIMARY EXTERNAL TYPEFACE

Helvetica Neue is ISACA’s primary typeface for external-facing use . Both the condensed and non-condensed versions may be used, in various weights, to create a consistent look while offering many design options . Samples of the most commonly used variations are shown below . This font is typically used on marketing materials, such as ads and brochures .

PRIMARY INTERNAL AND WEB TYPEFACE

Arial may be used when creating communications with a solely internal audience (such as an internal memo or email) or for web use when web-friendly fonts must be used (such as the body text on a web page) . Arial regular and Narrow, in bold and italic, may be used . Samples of each variation are shown below .

To achieve consistency, and to increase the likelihood that your document looks the same on the computer screen as it does in the hands of the receiver, the fonts shown below have been approved and selected for use . The Arial, Arial Narrow and Times New Roman fonts are readily available on most computer operating systems .

NOTE: Arial is preferred for electronic communication . Times New Roman is preferred for general Business correspondence documents .

3. Brand Elements

Helvetica Neue ThinHelvetica Neue LightHelvetica Neue RomanHelvetica Neue ItalicHelvetica Neue MediumHelvetica Neue BoldHelvetica Neue Heavy

Arial RegularArial ItalicArial Bold

Arial Narrow RegularArial Narrow ItalicArial Narrow Bold

Helvetica Neue Light Condensed

Helvetica Neue CondensedHelvetica Neue Condensed ObliqueHelvetica Neue Bold CondensedHelvetica Neue Light Condensed


TYPOGRAPHIC STYLE

The use of all-caps, or uppercase style, is discouraged as it does not convey the warm tone of the ISACA brand . Rather, sentence case is preferred in most instances, including headlines, headers, subheads and body text . Titles, such as book titles, presentation titles and slide titles, should be in title case .

Body text is always left justified .

Body Text Examples

Fellow members of ISACA have a limitless mix of interests, skills, knowledge and experiences . (PREFERRED)

Fellow Members of ISACA Have a Limitless Mix of Interests, Skills, Knowledge and Experiences . (NOT RECOMMENDED)

Title Examples

ISACA Membership (PREFERRED)

ISACA MEMBERSHIP (NOT RECOMMENDED)

3. Brand Elements

1

Increased Cyber ThreatsA report by Symantec notes that the total number of breaches in 2013 was 62 percent greater than in 2012, with eight of the breaches exposing more than 10 million identities each.i Organizations also face an increase in advanced persistent threats (APTs), which infiltrate a system by stealth, can take months or years to detect and are aimed squarely at commercial gain—typically the theft of credit card information, customer data or proprietary intellectual property. ISACA’s research shows that one in five enterprises surveyed in 2013 has experienced an advanced persistent threat, and 66 percent feel it is likely they will be the target of an APT attack.ii

Despite this increase in cyberattacks, many organizations do not appear to be aggressively increasing the number or skills of their cybersecurity staff. ISACA’s 2014 APT Survey found that more than half of the organizations polled (62 percent) are not increasing security training in 2014.

The Growing Cybersecurity Skills Crisis

Information and technology are delivering increasingly strategic benefits to enterprises today. At the same time, today’s cyber environment has become exponentially more dangerous. In the past few years, the numbers of threats, risk scenarios and vulnerabilities have grown at an alarming rate. Cybersecurity has evolved as a new field of interest, gaining political and societal attention. Governments and public-sector enterprises are engaging in cyberdefense, as well as, increasingly, offense and attack. If the world continues on this path, it is safe to say that the future expertise and responsibilities associated with cybersecurity will be essential to organizational survival and profitability.

Addressing the conflict of too many threats, too few skilled professionals

April 2014

“ It is often not until [businesses] have been hit that they realize there is an issue and a need to be proactive and to put resources into this area.” Jo Stewart-Rattray, CISA, CISM, CGEIT, CRISC, FACS CP, director of information security and IT assurance, BRM Holdichnot increasing

security training

more than

HALF62% EXCEPTION

These guidelines may not apply in special circumstances such as for creative treatment in special marketing campaigns and or creative platforms such as the MORE campaign. If you have any questions on proper typographic style please contact [email protected].


Photography

3. Brand Elements

The images shown in the examples on pages 21-23 demonstrate the creative distinction necessary to promote ISACA’s style of communication . Specifically, we emphasize a creative style that conveys our tone, which is:

• Quiet Confidence

• Professional

• Neutral (free of cultural or religious references)

• Respectful (diverse in gender, race and age)

• Warm, polite and courteous

Avoid the use of images that are strongly generic and impersonal . Clip art should be avoided whenever possible as well . Instead, choose images that embody a strong focus and personal view of the relevant objects and metaphors .

General Guidelines for Photography

• Cropping images to focus on a specific element can create a dramatic effect

• Photographs used should be cropped or edited (background images should be washed out) to eliminate distractions .

• Photographs should be proportionate


3. Brand Elements

ACCEPTABLE PHOTO STYLES

Two main categories of photographs are used in ISACA communications — abstract graphic images, and people photos . Examples of each are shown below .

Abstract Graphic Images

When choosing graphic images, look for colors similar to those in the ISACA color palettes . Also look for images that convey progress, speed, technology and the cutting edge . These images should be somewhat abstract, but include elements that relate to the subject they are associated with .

Using COBIT® 5

CONFIGURATIONMANAGEMENT

CO

NF

IGU

RA

TIO

N M

AN

AG

EM

EN

T: Us

ING

CO

BIT

®5

3701 Algonquin Road Suite 1010

Rolling Meadows, IL 60008 USA

P: + 1.847.253.1545

F: + 1.847.253.1443

[email protected]

isaca.org

CISM® R

EVIEW M

AN

UAL 2015

CISM® REVIEW MANUAL 2015


People Photos

Using photos of people helps us put a face on ISACA and lets us better connect to our audience . When choosing people photos, follow these guidelines:

• Use a variety of ages and ethnicities, as well as a mix of male and female subjects . ISACA is a global organization with members at every level of experience, and this should be reflected in our photo choices .

• Use well-lit, bright photos with light, airy backgrounds whenever possible .

• People’s expressions and poses should be natural . Avoid overly fake smiles and awkward body positions .

• Use people who appear to convey our intended tone of quiet confidence

• When choosing a portrait-style photo, i .e . one that focuses on one person’s head and shoulders, crop in close so the person fills most of the picture .

• When choosing action shots, look for compositions that appear candid, as though the people in the photo were unaware of the camera . Avoid shots where everyone is smiling at the camera .

3. Brand Elements

Shown above are acceptable portrait-style people photos . Note that the people can be looking at the camera or into the distance, but must always have a natural, happy expression . In each photo, the person fills most of the frame, rather than showing a lot of background . The people are well-lit, and the general mood is light and airy .


DO NOT use photos of people in metaphoric or non-realistic settings .

DO NOT crop the photo so that the person appears small in comparison to the background .

DO NOT use group photos that are overly posed or where everyone is smiling at the camera .

DO NOT use images with a negative, cold tone where the mood is generally dark or unemotional .

DO NOT use images that seem busy with a cluttered or dated background .

DO NOT use images that are over saturated in color .

3. Brand Elements

Unacceptable People Photos


3. Brand Elements

Video ProductionWhen producing videos to promote ISACA, use the same guidelines that apply to our brand for printed materials . Some examples of design details, taken from an existing video, are shown below .

Photography & Graphics

The guidelines for photography from the previous pages applies to videos as well . Use people photos and graphics where appropriate, or abstract imagery when needed .

Typography

Use Helvetica Neue for any written words in the video . See page 18 for typeface examples .

Color Palette

Use colors from the ISACA or product color palettes found in this guide .

Logo Use and Co-Branding

When using product logos, follow the guidelines found in section 4 of this guide . When pairing a product logo and the ISACA logo, follow the co-branding guidelines found starting on page 52 .


4. Product Brand Elements

Product Brands OverviewUnder the ISACA umbrella are several products, each with their own logo and color palette . These include COBIT® 5, certification programs and conferences . An overview of the logos are shown below .

CERTIFICATION PROGRAMS

COBIT® 5 CYBERSECURITY NEXUSTM (CSX)

CONFERENCES


ISACA Chapter Product Logo Usage Recognized ISACA chapters are encouraged to promote the ISACA brands, but the proper use of logos is required in order to do so . When using any of the ISACA logos, chapters are to follow the guidelines set forth in this manual, in addition to those below .

• ISACA logos may be displayed on printed materials and official ISACA chapter web sites if the purpose is to promote ISACA affiliation, membership, products, educational events, conferences, research deliverables and exams . Please use the proper format for print and on screen use .

• ISACA local chapters can use the certification logos for promotion of chapter-based review courses or to promote exams .

• The ISACA HQ logo may not be used on ISACA chapter event materials . Chapters must use only their chapter signature provided by ISACA International Headquarters .

• ISACA conference logos may not be used for chapter conferences without expressed consent .

• Chapters cannot authorize the placement of the ISACA International logo on any third-party web sites, unless specifically granted written permission by ISACA International Headquarters to do so .

• Whenever possible, the ISACA product logo should not appear larger than the height of the ISACA signature so as not to detract from the ISACA brand .

• It is preferable that logos be placed side by side, with the ISACA signature in the lower right corner of the piece .

• Your ISACA chapter logo (not the ISACA International logo) must be used when promoting your chapter . If you need your chapter logo, please contact us at [email protected] .

• ISACA logos may not be used as, or part of, names of social media groups or networks . For example, chapters may use the acronym CISA in a group name, but not the CISA logo .

CERTIFICATION LOGOS

Chapters can use the certification logos on chapter web sites and marketing materials . ISACA local chapters can use the certification logos for promotion of chapter-based review courses or to promote exams . Certification logos cannot be used on personal business cards . Logos for each of ISACA’s four certifications are available in a vertical and horizontal format and should not be amended in any way .

CONFERENCES, TRAINING & EVENT LOGOS

The ISACA logo or ISACA conference logos may not be used on ISACA chapter event materials . Chapters are to use their chapter logos only .

ISACA PRODUCT LOGOS

Logos can be found on the chapter leader portal

Resources to Help You > Marketing > ISACA Logos

Should you have any questions on ISACA’s Trademark and or IP usage or guidelines please contact the ISACA Marketing Department at [email protected] .




Certification Programs Branding

CERTIFICATION LOGO FORMATS

Each certification program offered by ISACA has its own logo, and the four logos are related in appearance . There is a horizontal and a vertical format of each logo . When the vertical format of these logos are used next to each other they must always be top aligned, as shown below .

There are also color, black and reversed to white versions of each logo, for instances of one-color printing, or where the logo must be used on a background against which the color logo cannot be easily seen .

If using the certification logos independent of the ISACA or ISACA chapter signature you must use the tagline— “An ISACA® Certification” . In situations where the certification logos are used in conjunction with the ISACA signature or ISACA chapter signature, the tagline should not be included . For more information on tag line usage and applica-tion, see page 53 .

For additional information on ISACA Trademark usage and or guidelines, please reference ISACA’s IP Handbook in the Brand Guidelines folder on the T drive .



Black Logos

The only time the black version of the certification logos may be used is when a piece is printed only in black or greyscale . Use of the vertical or horizontal format is determined by the layout of the communications piece .



Reversed to White Logos

The only time the white version of the certification logos may be used is when a piece is printed only in black or greyscale, and the design dictates that the logo should be reversed to white . Use of the vertical or horizontal format is determined by the layout of the communications piece .



PROPER USE OF CERTIFICATION LOGOS

DO use the color logos on white or light-colored backgrounds .

DO use the black logos on white or light-colored backgrounds, when the communication piece is printed only in black or greyscale .

DO use the logos reversed to white on black or dark-colored backgrounds, when the communication piece is printed only in black or greyscale .



IMPROPER USE OF CERTIFICATION PROGRAM LOGOS

DO NOT distort the logos . You may scale the logos up and down but the proportions must always remain the same .

DO NOT re-create any part of the logo or set any of the words in a different typeface .

DO NOT place the color logos on black or dark-colored backgrounds, or on patterns, against which the logos can not be easily seen .

DO NOT change any of the colors in the logos .

Certified Informa-tion



IMPROPER USE OF CERTIFICATION PROGRAM LOGOS (CONTINUED)

DO NOT orient the logos vertically or on a diagonal, in relationship to the page or layout .

DO NOT give the logos a drop shadow or glow effect .

DO NOT crop the logos in any way .

DO NOT use the logos in a sentence or headline .

Get your certification today!



CERTIFICATION LOGO CLEAR SPACE

When placing a certification logo, the proper clear space between it and any other design elements, or the edge of the page, must be maintained . The clear space is equivalent to twice the height of the certification name inside the circle, as described below .

X

To determine the clear space, measure the height of the letters in the certification name inside the circle (here, the height of the letters in CISA) . We’ll call this “X” .

The clear space is 2X, or twice the measurement X . Make sure that the proper clear space (“2X”) is always maintained between the logo and any other design elements of the edge of the page .

2X

2X

2X

CERTIFICATION LOGOS MINIMUM SIZE REQUIREMENTS

Because the certification logos are a variety of dimensions, the minimum size requirement is determined by the size of the circular part of the logo . In order for the tagline “An ISACA® Certification” to remain legible, it must not be used in conjunction with a circular logo smaller than 0 .5” . The circular part of the logo must never be printed smaller than .4" in diameter, as shown below . The logos should only be used this small when absolutely necessary, such as on a small item (pencil or small giveaway) or in a co-branding situation where many logos appear very small .

.4"

.5"

.4"

The tagline should be included whenever possible, but if the logo is used smaller than .5" in diameter, use the version without the tagline.












Hex (web-safe color) Hex# 00 A4 E4




Hex (web-safe color) Hex# 6C B3 3F

Hex (web-safe color) Hex# FB B0 34

Hex (web-safe color) Hex# E3 18 37

CGEIT Blue

CISM Green

CRISC Yellow

CISA Red

CERTIFICATION PROGRAMS COLOR PALETTE

Consistent color is as important to our brand identity as our signature . To maintain consistency and correctly portray the brand, colors have been chosen to represent ISACA products and services .

The following color palette is for use on internal and external visual applications . They should be used whenever items pertain to one or more of ISACA’s products or services .

Just as each certification program has its own logo, it also has a signature color which appears in each logo . The colors for each certification are detailed below .



COBIT® 5 Branding

COBIT® 5 LOGO

The COBIT® 5 logo is shown below . There is a color version and a reversed version . Note that even in the reversed version, the circle-5 is still in ISACA Maroon .


PROPER USE OF COBIT® 5 LOGO

DO use the color logo on white or light-colored backgrounds .

DO use the reversed logo on black or dark-colored backgrounds .


For additional information on ISACA IP usage and or guidelines, please reference ISACA’s IP Handbook in the Brand Guidelines folder on the T drive .


IMPROPER USE OF COBIT® 5 LOGO

DO NOT distort the logo . You may scale the logo up and down but the proportions must always remain the same .

DO NOT change any element of the logo, use the logo without the tagline or set the tagline in a different typeface .

DO NOT place the color logo on black or dark-colored backgrounds, or on patterns, against which the logo can not be easily seen .

DO NOT change any of the colors in the logos .


AN ISACA® FRAMEWORK


DO NOT orient the logo vertically or on a diagonal, in relationship to the page or layout .

DO NOT give the logo a drop shadow or glow effect .

DO NOT crop the logo in any way .

DO NOT use the logo in a sentence or headline .

Get the newest edition of today!

IMPROPER USE OF COBIT® 5 LOGO (CONTINUED)



COBIT® 5 LOGO CLEAR SPACE

When placing the COBIT® 5 logo, the proper clear space between it and any other design elements, or the edge of the page, must be maintained . The clear space is equivalent to as described below .

COBIT® 5 LOGO MINIMUM SIZE REQUIREMENTS

The COBIT® 5 logo must not be used smaller than five-eighths ( .625”) wide . The logo should only be used this small when absolutely necessary, such as on a small item (pencil or small giveaway) or in a co-branding situation where many logos appear very small .


X

To determine the clear space, measure the height of the letters in COBIT® . We’ll call this “X” .

Make sure that the proper clear space (“X”) is always maintained between the logo and any other design elements of the edge of the page .

X

X

X

.625”

Smallest size for logo


COBIT® 5 COLOR PALETTE

Consistent color is as important to our brand identity as our signature. To maintain consistency and correctly portray the brand, colors have been chosen to represent ISACA products and services.

The following color palette is for use on internal and external visual applications. They should be used whenever items pertain to one or more of ISACA’s products or services.

The COBIT® 5 logo is created using two colors — COBIT® 5 Navy and COBIT® 5 Maroon, which is the same as ISACA Maroon. These colors must never be substituted in the COBIT® 5 logo. Use these colors when creating COBIT® 5 communications pieces. The formulas for creating these colors in various formats are detailed below.





Hex (web-safe color) Hex# 00 3E 7ECOBIT® 5

Navy




Hex (web-safe color) Hex# A3 00 46ISACA

MaroonCOBIT® 5 Maroon

COBIT® 5 Navy



Cybersecurity NexusTM Branding

CYBERSECURITY NEXUSTM LOGO

The Cybersecurity NexusTM color logo is shown below . The graphic boxes and registered name, “Cybersecurity Nexus”, must always appear together, never separately .

Cybersecurity is always one word

Trademark Symbol

Background behind the “X” should always be white (for exceptions see pages 44 & 45)

CYBERSECURITY NEXUSTM NAMING CONVENTIONS

The initial mention of CYBERSECURITY NEXUSTM (CSX) must be written out in full . All succeeding mentions are allowed to use the CSX abbreviation .

Naming conventions that must be used for each Cybersecurity Nexus resource:

• Cybersecurity Fundamentals Course (if the event is happening independent - ie . online course or webinar)

• Cybersecurity Fundamentals Certificate (not to be confused with certification .)

• Cybersecurity Fundamentals Workshop (if the event is happening at a conference)

• Cybersecurity (CSX) Webinar Series

Should you have any questions regarding the content, or for additional information on Cybersecurity Nexus Trademark usage and guidelines please contact the ISACA Marketing Department at [email protected] .


CYBERSECURITY NEXUSTM LOGO— COLOR & PRINTING RESTRICTIONS

Black and Reversed to White Logos

The only time the black version of the logo may be used is when a piece is printed only in black or greyscale or when using certain printing techniques such as screen printing and one color printing. This means that replicating the gradients in the logo is not always possible . In these instances we should use the one color (black or reversed to white) versions of the logo as shown below .



PROPER USE OF CYBERSECURITY NEXUSTM LOGO

DO use the color logo on white or light-colored backgrounds .

DO use the reversed logo on black or greyscale backgrounds .


For additional information on ISACA IP usage and or guidelines, please reference ISACA’s IP Handbook in the Brand Guidelines folder on the T drive .

The color logo should be used whenever possible. The only approved use of the reversed logo is on black or grayscale backgrounds.


IMPROPER USE OF CYBERSECURITY NEXUSTM LOGO

DO NOT distort the logo . You may scale the logo up and down but the proportions must always remain the same . Make sure that you scale the logo appropriately, the gradient must never appear altered or coming from a different direction .

DO NOT change or eliminate any element of the logo, or set the logotype in a different typeface .

DO NOT place the reverse logo on colored backgrounds or the color logo on black or dark-colored backgrounds, or on patterns, against which the logo can not be easily seen .

DO NOT change any of the colors or the gradient pattern in the logo .




DO NOT give the logo a drop shadow or glow effect .

DO NOT crop the logo in any way .


Learn more about today!

IMPROPER USE OF CYBERSECURITY NEXUSTM LOGO (CONTINUED)



CYBERSECURITY NEXUSTM LOGO CLEAR SPACE

When placing the Cybersecurity NexusTM logo, the proper clear space between it and any other design elements, or the edge of the page, must be maintained . The clear space is equivalent to as described below .


X

To determine the clear space, measure the height of the rounded gradient boxes in Cybersecurity NexusTM logo . We’ll call this “X” .

Make sure that the proper clear space (“X”) is always maintained between the logo and any other design elements of the edge of the page .

X

X

X

CYBERSECURITY NEXUSTM LOGO MINIMUM SIZE REQUIREMENTS

The logo must not be used smaller than .625" tall . The logo should only be used this small when absolutely necessary, such as on a small item (giveaway or e-mail signature) or in a co-branding situation where many logos appear very small .

.625”


CYBERSECURITY NEXUSTM COLOR PALETTE

Consistent color is as important to our brand identity as our signature . To maintain consistency and correctly portray the brand, colors have been chosen to represent ISACA products and services .

The following color palette is for use on internal and external visual applications . They should be used whenever items pertain to one or more of ISACA’s products or services .

The Cybersecurity NexusTM logo is created using the three colors below as well as specific gradients . These colors must never be substituted in the Cybersecurity NexusTM logo . The formulas for creating these colors in various formats are detailed below .





Hex (web-safe color) Hex# 6B 73 7A

Gray







Hex (web-safe color) Hex# F2 59 24

Hex (web-safe color) Hex# 00 70 78

Orange

Teal



Conference Branding System

The intent of our branding system is to convey a set of rules, systems and logic for our conference identity systems . These guidelines are designed with a systematic approach to maintain the hierarchy and messaging, while still providing flexibility and creativity .

Developing these rules and rationale allow for a clear, concise and consistent representation of our branded conferences . Clear reasoning and wisdom in guidelines is a cornerstone of good branding and ensures the intended message, hierarchy and graphics are kept intact .

CORE CONFERENCE LOGO

The Computer Audit Control and Security Conference (CACS) requires a strong and authoritative logo that offers a pragmatic sensibility, as well as a sense of security and interconnectedness . Our brand-mark iconography conveys this feeling of connectedness, linking, strength, and networking; compiled with strong, clear typography, it lends a sense of regulation and authority .

There will be times when the ISACA descriptor line will not be necessary . In such instances, it is acceptable to leave it off, only if a mention of CACS being “An ISACA Event” is present somewhere else, such as a headline .

SPECIFIC CONFERENCE LOGOS

Multiple colors are used to quickly differentiate conference locations, yet together offer a cohesive and unified family look . The specific colors designated per location are exclusive to each location and should only be used in conjunction with that specific location .

CACSA N I S A C A E V E N T

NORTH AMERICA2016

TM


ASIA PACIFIC2016

TM


2016 EURO

TM


2016 AFRICA

TM


2016 LATIN

TM


2016 OCEANIA

TM

CACSTM


TM



CACS SIGNATURE

The CACS brand-mark is an important graphic and corporate asset . It is important that this asset is protected and reproduced in high-quality wherever it appears . Only the approved digital files should be used for print or digital reproduction .

COLOR PALETTE

The CACS logo and it’s multiple location variations are comprised of a specific and unique color-system .These colors are used to allow for quick visual clarification and differentiation . The colors used for each unique and identifiable location brand-mark should never be altered and PMS colors should be used whenever possible . For instances when CMYK or RGB color palletes are necessary, the below formulations should be used .

PANTONE® (PMS): Spot color offset printing . The Pantone colors specified are for coated paper . For uncoated stock, visually match the coated specification as closely as possible .

CMYK: 4-color digital and offset printing .

RGB: On-screen viewing and web usage .

Iconography Conference Name

Descriptor

Date / Location


NORTH AMERICA2016

TM

CACS GRAY

PMS: 430 CMYK: 33 / 18 / 13 / 37RGB: 129 / 138 / 143

NORTH AMERICA

PMS: 165 PMS: 137CMYK: 0 / 65 / 100 / 0 CMYK: 0 / 38 / 95 / 0RGB: 255 / 99 / 25 RGB: 255 / 161 / 0

ASIA PACIFIC

PMS: 376 PMS: 381CMYK: 55 / 0 /100 / 0 CMYK: 23 / 0 / 90 / 0RGB: 122 / 184 / 0 RGB: 201 / 221 / 3

EUROPE


AFRICA


LATIN


OCEANIA



CA

CS

AN

ISA

CA

EV

EN

T

NO

RTH A

MERIC

A2016

TM


NORTH AMERICA2016

TM


ISOLATION SPACE

Always maintain at least the minimum amount of clear space around the CACS logo to preserve it’s visual prominence and integrity . This clear space isolates the brandmark from competing text and additional graphic elements such as other logos . The isolation space minimum is highlighted below and is the equivalent of the half the height of the CACS typography portion of the brandmark .


NORTH AMERICA2016

TM


NORTH AMERICA2016

TM

MINIMUM SIZE

For print purposes, the minimum width of the brandmark is 1 .5 inches .

For web applications, never use the brandmark at less than 108 pixels .

PROPER USAGE

DO use the color logos on white or light-colored backgrounds .

1 .5 inches or 108 pixels


NORTH AMERICA2016

TM CACSA N I S A C A E V E N T

NORTH AMERICA2016

TM


IMPROPER USAGE OF CONFERENCE LOGOS

DO NOT place the color logo on black or dark-colored backgrounds, or on patterns, against which the logo can not be easily seen .

DO NOT change any of the colors of the logos .

DO NOT change any element of the logo, or set any logo text in a different typeface or configuration .

DO NOT distort the logo . You may scale the logo up and down but the proportions must always remain the same .


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016

TMCACSA N I S A C A E V E N T

2016 NORTH AMERICA


NORTH AMERICA2016

TM


2016 NORTH AMERICA


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016

TM


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016


2016 NORTH AMERICA


NORTH AMERICA2016

TM


NORTH AMERICA2016

TMCACS

A N I S A C A E V E N T

NORTH AMERICA2016

TM


IMPROPER USAGE OF CONFERENCE LOGOS (CONTINUED)


DO NOT give the logo a drop shadow or glow effect when placed on white or a light color .

DO NOT crop the logo



CA

CS

AN

IS

AC

A E

VE

NT

NO

RTH

AM

ERIC

A20

16

TM

CACSA N

I S AC A

E V E NT

NORTH AMERICA

2016

TM


NORTH AMERICA2016

TMRegister for today!


NORTH AMERICA2016

TM


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016


NORTH AMERICA2016


2016 NORTH AMERICA


NORTH AMERICA2016

TM


Logo Co-brandingWhenever product or conference logos are being used, the ISACA signature must appear along with it on the same piece . For example, on the information graphic samples shown below, the COBIT® 5 and CSXTM logos are associated with the title, and the ISACA logo is placed in the lower right-hand corner .

General Guidelines for Co-branding

• ISACA signature must be prominent and legible . For appropriate ISACA signature use see page 6 .

• Product or conference logos must not appear larger than the ISACA signature .

• Logos should not be stacked on top of each other .



CERTIFICATION LOGO AND ISACA CO-BRANDING

Whenever a certification logo is used, the ISACA signature must appear along with it on the same piece . A typical certification advertisement is shown below . Design details as described below must be adhered to on all promotional pieces for ISACA certification .

• ISACA signature must be prominent and legible in one of the 4 corners .

• The certification logo(s) must not appear in the same corner as the ISACA signature .


Getting an ISACA® certification doesn’t just say you’re well read or well connected. It announces that you have the expertise and insight to speak with authority. The credibility that it adds lets you create value for your enterprise. Your certification is more than a credential,

it’s a platform that can elevate your career.

Register at www.isaca.org/Sept14-Jv3

“I’M RECOGNIZED FOR MY CERTIFICATION.

I’M VALUED FOR WHAT I DO WITH IT.” — KETAN DHOLAKIA, CISM, CRISC MANAGING PARTNER, MACLEAR CHICAGO, ILLINOIS, USA ISACA MEMBER SINCE 2007

Early registration deadline: 11 June 2014Final registration deadline: 21 July 2014

Register early for an upcoming exam and save US $50!

UPCOMING EXAM DATE:

6 September 2014*

CISA and CISM only

*Held in select locations

RecruitJRNLketan_Journal.indd 1 4/1/14 9:11 AM

As a global association with local connections, ISACA defines the roles of information systems governance, security, audit and assurance professionals worldwide.

Visit us at Infosecurity Europe 2014, stand C95 or learn more at www.isaca.org

“I WORK IN A FAST-CHANGING ENVIRONMENT.

WHEN CHANGE HAPPENS, ISACA IS THE FIRST TO TALK ABOUT IT.” — ROSEMARY AMATO, CISA DIRECTOR, DELOITTE AMSTERDAM, THE NETHERLANDS ISACA MEMBER SINCE 1998

CONNECTEDMORE

© 2012 ISACA . All Rights Reserved © 2012 ISACA . All Rights Reserved


A Business Framework for the Governance and Management of Enterprise IT

3701 Algonquin Road, Suite 1010


Phone: +1.847.253.1545

Fax: +1.847.253.1443

Email: [email protected]

Web site: www.isaca.org

A Business Fram

ework for the G

overnance and Managem

ent of Enterprise IT


COBIT® 5 PRODUCT CO-BRANDING

A typical COBIT® 5 book cover is shown below . Design details as described below must be adhered to on all COBIT® 5 products .

• ISACA signature must be reversed out in all white and located in the upper right corner .

• The publication name is set in Bauer Bodoni Italic, 25 point, in ISACA Maroon .

• The title is aligned flush left with the COBIT name in COBIT maroon and italicized .

• The full-color version of the COBIT logo is placed in the lower right corner .

• Spines includes both ISACA and COBIT logos and Pub title (unless the size is smaller than the acceptable size, see pages 15 and 40) .

• The back cover includes the ISACA signature in full color and the standard back cover content as outlined on page 72 .

3701 Algonquin Road Suite 1010 Rolling Meadows, IL 60008 USA

P + 1.847.253.1545F + 1.847.253.1443

[email protected]

isaca.org



CYBERSECURITY NEXUSTM PRODUCT CO-BRANDING

A typical Cybersecurity Nexus PPT is shown below . Design details as described below must be adhered to on all Cybersecurity Nexus products .

• The ISACA signature must appear on the communication piece .

• When placed on a white or light background, use the full color signature .

• When placed on a dark background use the grayscale or reversed out in all white version .

• The Cybersecurity Nexus logo must also appear on the communication piece .

• The Cybersecurity Nexus logo should not appear in the same corner as the ISACA signature .

Example primary/title pages

Example secondary/content pages



CYBERSECURITY NEXUSTM PRODUCT COVERS

A typical Cybersecurity Nexus publication cover is shown below . Design details as described below must be adhered to on all Cybersecurity Nexus products .

• The ISACA signature must appear on the communication piece .

• When placed on a white or light background, use the full color signature .

• When placed on a dark background use the grayscale or reversed out in all white version .

• The Cybersecurity Nexus logo must also appear on the communication piece .

• The Cybersecurity Nexus logo should not appear in the same corner as the ISACA signature .

• Spines includes both ISACA and Cybersecurity Nexus logo and Pub title (unless the size is smaller than the acceptable size, see pages 15 and 46) .

• The back cover includes the ISACA signature in full color and the standard back cover content as outlined on page 72 .

Example cover



CONFERENCE LOGO AND ISACA CO-BRANDING

Whenever a conference logo is used, the ISACA logo must appear along with it on the same piece . A typical conference advertisement is shown below . Design details as described below must be adhered to on all promotional pieces for ISACA conferences .

• ISACA signature must be prominent and legible in one of the 4 corners .

When Using The Conference Logo

• The conference logos must not appear in the same corner as the ISACA signature . If the conference is co-located the two conference logos must appear side by side and not stacked (see page 48) .

• The conference logos must always be in full-color (see page 48) .

NORTH AMERICA CACS 201428-30 April, 2014 – Las Vegas, Nevada

TODAY’SCONNECTIONS. TOMORROW’SSOLUTIONS.North America CACS is on track to be the highest-attended conference for IT Audit, Assurance, Control and Security professionals in more than five years. Network with IT Audit, Assurance and Security professionals as you:

• Gain “Madoff Whistleblower” Harry Markopolos’s insights on fraud and nine-year crusade to alert the SEC to Madoff’s massive Ponzi scheme

• Preview COBIT® 5 online at the ISACA booth

• Gain new insights on Assurance, Risk, Security, Governance, Compliance and Audit topics.

Register today at www.isaca.org/cacs2014-jv2

A

EURO Computer Audit, Control and Security Conference (CACS) Information Security and Risk Management Conference (ISRM)

Register now for ISACA’s Euro CACS/ISRM Conference 10-12 September. This inaugural event combines our world-renowned European conferences—CACS and ISRM—into one convenient setting to enhance your conference experience and increase your return on investment.

To register, visit www.isaca.org/2012euro


5. Brand Application

Stationery

HEADQUARTERS STATIONERY SPECIFICATIONS

To maintain a consistent look across all ISACA internal and external communications, we have created a distinct visual identity system . The examples on the following pages correctly display the ISACA signature placement, product logo placement, image and text placement, return mail address, and copyright information .

The ISACA corporate letterhead and envelope are shown below . When typing letters on the headquarters letterhead, use the font Times New Roman .

3701 Algonquin Road, Suite 1010

Rolling Meadows, Illinois 60008-3105, USA

Web Site: www.isaca.org

Telephone: +1.847.253.1545

Facsimile: +1.847.253.1443

E-mail: [email protected]

3701 Algonquin Road

Suite 1010


Address Service Requested


3701 Algonquin Road

Suite 1010


Address Service Requested

CHAPTER STATIONERY SPECIFICATIONS

The ISACA chapter letterhead and envelope are shown below . When typing letters on the chapter letterhead, use the font Times New Roman .

Chapter Name

XXX Name Road, Suite XXX

City, State XXXXX, USA

Web Site: www.isaca.org/chapter

Telephone: +1.XXX.XXX.XXXX

Facsimile: +1.XXX.XXX.XXXX

E-mail: [email protected]


XXX Street Name

Suite XXX

City, State, XXXXX, USA



Email TemplatesWhen creating an email to be sent to members or as an advertisement for ISACA and our products, you must always include these elements:

• Pre-header

• ISACA’s social media icons for Facebook, Twitter, LinkedIn . These logos must link to the appropriate web page (reference the boiler plate on page 4), and can be found in the Brand Guidelines folder on the T drive .

• ISACA Logo

• Hero Image

• Header

• Product Logo(s) when relevant

Text Styles For Emails

When writing emails, use the following text styles:

• Headlines should be set in Arial Bold, 12 point, in ISACA maroon (139 R, 35 G, 70 B) .

• Body text should be set in Arial Regular, 10 point, dark gray .

• Links within body text should be set in Arial Bold, 10 point, in blue (27 R, 134 G, 173 B)

• Special callouts should be set in Arial Bold, in ISACA maroon (139 R, 35 G, 70 B) .

• When listing dates in the email, they should be written (Day) (Month) (Year)

FOOTERS

All emails must also include the appropriate footer, as described below .

Internal Footer

The internal footer should be used on all emails we send internally (all or e-news letters and marketing emails), such as @aGlance, @ISACA, Expressline, COBIT Focus, and marketing & promotional emails, and should read as follows:

© 2014 ISACA All Rights Reserved Privacy Policy // Opt out from this email // Unsubscribe

External Footer

The external footer should be used if a 3rd party vendor is sending our email, and should read as follows:

Unsubscribe from all ISACA emails | ISACA Privacy Policy © 2014 ISACA . All rights reserved .

3701 Algonquin Road, Suite 1010, Rolling Meadows, Illinois 60008, USA



PowerPoint TemplatesWhen designing an ISACA branded presentation, consistent use of design elements, as described earlier in this guide, should be applied . These include:

• Font use (see page 18) .

• Hierarchy of information (see page 68) .

• Proper ISACA and product logo usage (see Section 3 and Section 4) .

• Proper imagery usage (see page 20) .

All presentations must include the following elements:

• The ISACA signature (appropriately sized)

• All rights reserved information

• The appropriate product logo when relevant .

General Guidelines for Power Point Templates

• The ISACA signature should be prominent yet appropriately sized for the slides; four-color signature on a white background is preferred .

• Keep text on the slide to a minimum: no more than five bullet points, depending on the length of each bullet .

• Dark background can be used for on-screen presentations; the light background can be used for printed presentations .



Research Materials

PUBLICATION COVERS

A sample publication cover is shown below . Note the following design elements:

• The cover is co-branded with the COBIT® 5 logo and the ISACA signature . The signature is placed in the upper right corner, while the COBIT® 5 logo is placed near the title . This reflects the hierarchy of ISACA being the umbrella brand, and the book is about a subject relating to COBIT® 5 .

• The ISACA signature and headquarters contact information is placed on the back cover .

• The image on the cover is an abstract graphic conveying speed and technology .

• The overall design is clean and organized .

• Spine of (print) publications,should include both ISACA and product logos and the publication title . If the size of the logos will be smaller than the acceptable size (see pages 15 and 39) only include the publication title .

• On print publications, the back cover includes the ISACA signature and standard back cover content as outlined on page 72 .

Using COBIT® 5

VENDORMANAGEMENT

3701 Algonquin Road Suite 1010


P: + 1.847.253.1545

F: + 1.847.253.1443

[email protected]

isaca.org

Ve

nd

oR

MA

nA

ge

Me

nt

Using COBIT® 5

Digital Sample

BYOD Security Audit/Assurance Program

2014

Full Spread Print Sample



WHITE PAPER AND SURVEY RESULTS COVERS

Cover treatment for the survey and white papers will be the same as publications with the exception of the following:

• White papers and Survey’s will not require a back cover as these are always only electronic version .

• White papers and survey results could include the abstract to be at the bottom on the front cover .

AN ISACA Cloud VISIoN SerIeS WHITe PAPer

Security

aS a Service: Business BenefitsWith Security, Governanceand Assurance Perspectives

enterprises need to protect their assets, but

they also need to be profitable to stay in business. Protecting information assets has

become a priority for enterprises that need to meet compliance requirements or need to protect sensitive data. The challenge for these enterprises is implementing robust security practices while keeping investment and operational cost contained. SecaaS offers a way for enterprises to access security services that are robust, scalable and cost effective. With reward comes risk, and enterprises should consider benefits and risk when evaluating SecaaS products and providers. Above all, enterprises need to understand that they can outsource responsibility but they can’t outsource accountability; therefore, enterprises should implement an assurance plan that includes assessing the services

obtained from SecaaS providers. When an audit is not possible, enterprises must still obtain proof that controls used

to protect enterprise information assets are working effectively.

Security aS a Service: Business BenefitsWith Security, Governanceand Assurance Perspectives



Advertising

PRINT ADVERTISING

When designing print advertising, consistent use of design elements, as described earlier in this guide, should be applied . These include:





All print ads must include the following elements:

• The ISACA signature

• All rights reserved information

• A strong call to action with a friendly URL

• The appropriate product logo when relevant .

General Guidelines for Print Advertising

• The ISACA signature should be prominent and placed in one of the 4 corners; four-color signature on a white background is preferred .

• Product logo(s) can be placed in one of the 4 corners and should not appear larger than the height of the ISACA logo .

• The ISACA copyright should be lower left corner in the footer of the ad .

A sample advertisement layout is shown below .

Getting an ISACA® certification doesn’t just say you’re well read or well connected. It announces that you have the expertise and insight to speak with authority. The credibility that it adds lets you create value for your enterprise. Your certification is more than a credential,

it’s a platform that can elevate your career.

Register at www.isaca.org/Sept14-Jv3

“I’M RECOGNIZED FOR MY CERTIFICATION.

I’M VALUED FOR WHAT I DO WITH IT.” — KETAN DHOLAKIA, CISM, CRISC MANAGING PARTNER, MACLEAR CHICAGO, ILLINOIS, USA ISACA MEMBER SINCE 2007

Early registration deadline: 11 June 2014Final registration deadline: 21 July 2014

Register early for an upcoming exam and save US $50!

UPCOMING EXAM DATE:

6 September 2014*

CISA and CISM only

*Held in select locations

RecruitJRNLketan_Journal.indd 1 4/1/14 9:11 AM

As a global association with local connections, ISACA defines the roles of information systems governance, security, audit and assurance professionals worldwide.

Visit us at Infosecurity Europe 2014, stand C95 or learn more at www.isaca.org

“I WORK IN A FAST-CHANGING ENVIRONMENT.

WHEN CHANGE HAPPENS, ISACA IS THE FIRST TO TALK ABOUT IT.” — ROSEMARY AMATO, CISA DIRECTOR, DELOITTE AMSTERDAM, THE NETHERLANDS ISACA MEMBER SINCE 1998

CONNECTEDMORE



PRINT BROCHURES AND DIRECT MAIL

When designing print brochures and direct mail, follow these general guidelines:

• The ISACA signature should be prominent and placed in one of the 4 corners; four-color signature on a white background is preferred .

• Product logo(s) should not appear larger than the height of the ISACA logo .

• The back or last page of the piece should always include the ISACA signature with address, phone, fax, email, and URL beneath it, as well as the ISACA copyright centered at the bottom .

Additional elements to consider including are:

• ISACA social media links

• Product logos

• QR code

• Programmed friendly URL (eg . isaca.org/renew, which links to the appropriate landing page on isaca.org)

Examples of a member brochure are shown below .

“MY CERTIFICATION HELPED ME GET HERE. MY MEMBERSHIP HELPS KEEP ME HERE.”

TIMO HEIKKINEN, CISA, CGEITSENIOR AUDIT SPECIALIST, NORDEA HELSINKI, FINLANDISACA® MEMBER SINCE 1999

CERTIFICATIONSCREDENTIALS TO DISTINGUISH YOURSELF

Certified Information Systems Auditor® (CISA®)For experienced IS audit, control and security professionals.

Be recognized among the most-qualified and sought-after IS audit, control, assurance and security professionals. ISACA’s globally accepted CISA certification showcases your experience, knowledge and abilities to manage vulnerabilities as well as ensure compliance.

2014 SC MAGAZINE AWARD FINALIST FOR BEST PROFESSIONAL CERTIFICATION PROGRAM

The American National Standards Institute (ANSI) has accredited the CISA, CISM, CGEIT and CRISC certification programs under ISO/IEC 17024:2003

Certified Information Security Manager® (CISM®) For experienced information security managers and those who have information security management responsibilities.

Take your place among the most in-demand information security management professionals. Showcase your ability to configure information security programs to advance broader enterprise goals and objectives.


Certified in the Governance of Enterprise IT® (CGEIT®)For professionals responsible for overseeing the IT governance of an enterprise.

Secure your future with proven experience, knowledge and credibility to discuss critical issues around governance, and align governance with strategic enterprise goals.


Certified in Risk and Information Systems Control™ (CRISC™)For risk and control professionals.

Equip yourself to be a strategic partner in an enterprise as an individual with proven skills to understand and articulate business risk, and implement appropriate information systems controls.

2013 SC MAGAZINE AWARD WINNER FOR BEST PROFESSIONAL CERTIFICATION PROGRAM

Learn more at www.isaca.org/certification



WEB BANNERS

When designing web banners, consistent use of design elements, as described earlier in this guide, should be applied . These include:





Guidelines for Web Banners

• For external banner advertising, the ISACA signature should be prominent and placed in one of the 4 corners; four-color signature on a white background is preferred .

• The ISACA signature should not be included on banners used for isaca.org, ISACA digital Journal, Journal mobile app or ISACA conference mobile apps .

• Product logo(s) can be placed in one of the 4 corners and should not appear larger than the height of the ISACA logo .

• Minimal text should be used . A title and call to action should always be present at any banner ad size .

Sample web banner layouts are shown below . The file formats for static banner ads can be JPG, PNG or GIF . File sizes should be limited to 50 KB or smaller .



Web Landing PagesWhen designing for the ISACA web site please also reference the ISACA Web Standards .

General Guidelines for Web (isaca.org)

• Use only the approved typefaces (see page 18) .

• Use professional images that are in-line with ISACA’s brand standards (see page 20) .

• When including or writing copy for the website, make sure that it is in-line with ISACA’s approved voice and tone (see page 68) .


Value of COBIT ® 5Information is driving change in today’s enterprise. The challenge is how to govern and manage this information effectively. COBIT 5 is the latest version of ISACA’s globally accepted framework, providing an end-to-end business view of the governance and management of enterprise IT that reflects the central role of information and technology in creating value for enterprises. The principles, practices, analytical tools and models found in COBIT 5 embody thought leadership and guidance from global experts.

COBIT 5 and its continually expanding family of products is a comprehensive portfolio of publications developed by ISACA that includes the framework and enabler and professional guides. Each guide is designed to expand on the COBIT 5 framework by providing detailed and practical guidance on how enterprises of all sizes can use COBIT to:

• Maintain high-quality information to support business decisions

• Achieve strategic goals and realize business benefits through the effective and innovative use of IT

• Achieve operational excellence through reliable, efficient application of technology

• Maintain IT-related risk at an acceptable level

• Optimize the cost of IT services and technology

• Support compliance with relevant laws, regulations, contractual agreements and policies

Licensing and Use of COBIT 5With the release of COBIT 5, ISACA has changed and expanded its licensing program to account for a variety of COBIT uses. As always, each individual purchasing a COBIT 5 product is allowed to use it for his/her own personal purposes. However, providing copies to others or otherwise using COBIT 5 except as permitted by ISACA or detailed in the ISACA guidelines, is not permitted.

COBIT 5 licensing is required for training, consulting, company-wide internal implementation and commercial uses. The path to licensure is shaped by ISACA’s COBIT 5 content/use licensing guidelines, which

can be found at isaca.org/COBITLicensing. Pursuant to ISACA’s guidelines, some uses require a lawfully obtained copy or permission from ISACA, while other, more substantive uses will require a license from ISACA. Use categories and corresponding licensing fees are summarized below and on ISACA’s web site, where license application guidance can be found. Should you have any questions regarding licensure or use, please contact the ISACA’s intellectual property director at [email protected].

Internal Use LicenseThis license provides access to multiple individual COBIT 5 users within an enterprise and is intended for enterprises of any size who wish to use COBIT 5 for internal, noncommercial purposes (e.g., governance and management, security, risk management and assurance of IT assets).

The internal use subscription provides:

• Multiple individual COBIT 5 users access to the entire family of COBIT 5 publications

• Updates to any COBIT 5 publications released during the term of the agreement

• Access to any new COBIT 5 publications released during the term of the agreement (please see the COBIT 5 Family of Products page for current and planned releases)

PRICING: US $120 PER USER with volume discounts available. For fewer than 10 users, purchasing directly from the ISACA Bookstore purchases are recommended.

6. Writing for the ISACA Brand

ISACA Voice and ToneJust as the colors, logos, and photography is important in conveying our brand, so too is the tone and voice in which we write . In general, the ISACA voice is:

• Professional

• Clear and concise, partly to aid the comprehension of those whose first language is not English

• Confident and encouraging, reinforcing our position as a thought leader in the industry

• Free of cultural and religious references (e .g . “Christmas” and specific seasons such as “winter,” since they differ around the world), slang, jokes/puns, and hate/offensive speech of any kind

• Warm, ensuring that “professional” and “formal” do not cross the line into “aloof”

• Polite and courteous

• Respectful of the readership

• Informational over promotional (conveying facts, not hype)

US VS. UK ENGLISH

Generally, use American/US English for ISACA/ITGI publications, Journal articles, etc ., unless the author chooses to use UK English . Most COBIT products as well as all ISACA IT Audit and Assurance Standards, Guidelines, and Tools and Techniques use International/British/UK English . In a direct quote, maintain the chosen language of the writer/speaker .

HIERARCHY OF INFORMATION

For most communications such as advertisements, flyers, direct mail campaigns and e-blasts, the use of headlines, subheads and introductions helps organize your message and instantly grab attention . By breaking up the text into smaller sections (rather than having only a headline followed by paragraphs of body copy) the reader can more easily grasp the meaning and stay interested . Sample copy below illustrates this hierarchy .

Headline

Intro copy

Body copy


1

Increased Cyber ThreatsA report by Symantec notes that the total number of breaches in 2013 was 62 percent greater than in 2012, with eight of the breaches exposing more than 10 million identities each.i Organizations also face an increase in advanced persistent threats (APTs), which infiltrate a system by stealth, can take months or years to detect and are aimed squarely at commercial gain—typically the theft of credit card information, customer data or proprietary intellectual property. ISACA’s research shows that one in five enterprises surveyed in 2013 has experienced an advanced persistent threat, and 66 percent feel it is likely they will be the target of an APT attack.ii

Despite this increase in cyberattacks, many organizations do not appear to be aggressively increasing the number or skills of their cybersecurity staff. ISACA’s 2014 APT Survey found that more than half of the organizations polled (62 percent) are not increasing security training in 2014.

The Growing Cybersecurity Skills Crisis

Information and technology are delivering increasingly strategic benefits to enterprises today. At the same time, today’s cyber environment has become exponentially more dangerous. In the past few years, the numbers of threats, risk scenarios and vulnerabilities have grown at an alarming rate. Cybersecurity has evolved as a new field of interest, gaining political and societal attention. Governments and public-sector enterprises are engaging in cyberdefense, as well as, increasingly, offense and attack. If the world continues on this path, it is safe to say that the future expertise and responsibilities associated with cybersecurity will be essential to organizational survival and profitability.

Addressing the conflict of too many threats, too few skilled professionals

April 2014

“ It is often not until [businesses] have been hit that they realize there is an issue and a need to be proactive and to put resources into this area.” Jo Stewart-Rattray, CISA, CISM, CGEIT, CRISC, FACS CP, director of information security and IT assurance, BRM Holdichnot increasing

security training

more than

HALF62%

2

Help Wanted: Cybersecurity ProfessionalsYet even the enterprises that recognize they need to add cybersecurity professionals to their staff face a daunting challenge—there are more job openings than there are qualified professionals. A study by Cisco estimates that close to 1 million positions for security professionals currently remain unfilled.iii

There are several reasons for this shortage. One is that it is not a trivial task to master the knowledge required to become truly effective at threat detection and mitigation. Countering a sophisticated attack by a well-resourced adversary requires much more than a set of baseline security practices. It demands specialist security skills, intelligence-led risk assessments, street-smart education of staff and state-of-the-art forensic analysis skills. Ideal candidates are well-rounded and have a solid foundation in networking, operating systems, web technologies, incident response, and an understanding of the threat landscape and risk management.

“ Both classic security skills and advanced skill areas like malware, big data analytics or executive management of security programs are hard to find or very expensive.”Eddie Schwartz, CISA, CISM, CISSP, PMP, MCSE, vice president of global cybersecurity and consulting solutions at Verizon Enterprise Solutions and chair of ISACA’s Cybersecurity Task Force

The View From On CampusAnother contributor to the cybersecurity skills shortage is that post- secondary educational institutions are not producing a sufficient quantity of new graduates with the skills to satisfy government and enterprise needs. A number of vendors, government and nonprofit institutions are partnering with universities to provide educational resources on this subject. ISACA, for example, already provides professors with the Model Curriculum for Information Security Management, and is planning to make available cybersecurity case studies, teaching notes and a student book later in 2014. However, this academic/corporate collaboration has not spread across the globe, and the number of cybersecurity-trained graduates emerging from universities in a typical year falls far short of the massive number of new hires and experts needed today.

ISACA recently polled 171 of its student members at academic institutions around the world on the subject of cybersecurity. Fully 88 percent of respondents plan to work in a field or job that requires some level of cybersecurity knowledge. Yet only 47 percent feel they will have adequate cybersecurity knowledge to do the type of job they are seeking when they graduate. Interestingly, only 23 percent said their university does not offer courses in cybersecurity, so concerns about inadequate knowledge cannot be attributed solely to course availability.

Technology Skills Are Not EnoughAdvanced threat vectors and emerging technologies require that cybersecurity professionals be skilled in technology. But that is not enough. Cybersecurity as a discipline includes the social environment of people, enterprises and related processes. In addition to other types of risk, social risk primarily arises from people and their behavior, human factors in IT use, and the emergence of change within the overall system.

To raise awareness of threats within an organization and drive behavior changes, cybersecurity professionals should also be skilled at speaking the language of business, understanding their employer’s business strategy and organizational structure, and communicating effectively with employees at all levels in the organization, from the mailroom to the boardroom.

In the event of an incident, these skills are even more important, as the organization’s specialist team of IT and cybersecurity professionals, generally referred to as a CSIRT (computer security incident response team), must have the skills to effectively navigate managing a major incident, conducting a forensic analysis, investigating the likely business impact and preparing a post-mortem report for senior management and often board members.

ISACA survey of student members shows gap between cybersecurity career interest and perception of readiness post-graduation

Campus

Want Cybersecurity Career

Feel Adequately Prepared

20

0

40

60

80

10088%

41%Gap 47%

Skills Gap

Headlines

Keep headlines concise and to the point . A headline should convey the essential message of the piece while piquing interest and engaging the audience .

Subheads

Use subheads to break up lengthy text and make it easier to scan . Subheads should be fairly short (around three to eight words) and sum up the text they are associated with .

SCANABILITY

Often, our communication pieces have only a few moments to capture our audience’s attention . Write with scanability in mind — in other words, make copy easy to grasp, use heads and subheads to call out the general point of the communication, and break copy into smaller, more easily digestible chunks . The use of callouts, pull quotes and sidebars can also help a reader easily scan the content and understand the communication at a glance .



Copywriting Standards

WRITING RESOURCES

Every piece of communication issued, whether formal or informal, has a specific point to convey . The first objective of any communication should be to relay the point succinctly, clearly and concisely . Remember that every communication, from a brief email to an official Memorandum of Understanding, represents ISACA to the world .

There are often situations in which it is possible to emphasize an ISACA message in addition to the point of the communication with very little additional wording . ISACA maintains several sources of material that can supply those messages:

ISACA Tagline

“Trust in, and value from, information systems”—This statement now accompanies the logo, so it appears regularly in ISACA’s communications . However, there may be opportunities to stress the “trust” and “value” messages over and above their appearance in the tag-line . For example, it might be possible in an e-mail to close with something similar to “Thanks for your inquiry . We are pleased to provide you the requested material, which we hope will help you build trust and value in your organization’s information systems .”

ISACA Message Map

This is a series of messages built on the basis of ISACA’s tagline, and tailored for a variety of different purposes (for members, for enterprises, in the global business environment, etc .) . The messages were developed by ISACA leaders and ISACA staff with guidance from Ketchum PR . There are two presentations of the messages on the T drive, in the Messages folder . (Refer to the two PowerPoint presentations with titles that reflect the November 2009 date .)

NOTE: Most people are already using one of the messages in their e-mail signature block (“As an independent, nonprofit, global membership association, ISACA engages….”). Other messages may be appropriate used wholly or in part in other communications.

Fact Sheets

These can be found in the media room area on the ISACA web site (isaca.org/news) . There are fact sheets on ISACA, ITGI, and many products and activities . These can provide a good source for quick “bites” of factual information that may complement certain types of communication .

Boilerplate

Refer to “About ISACA” on page 4 .

Glossary of Terms

Found at isaca.org/glossary, ISACA’s glossary of terms provides definitions of industry-related terms . All ISACA-written material should define terms, as appropriate, based on the definitions provided in this glossary .

ISACA IP Guidelines

For additional information on ISACA IP usage and or guidelines, please reference ISACA’s IP Handbook in the Brand Guidelines_2013 folder on the T drive .



STANDARD WRITTEN FORMATS

Certain types of information should always be written in the same way in order to present a consistent and easy-to-follow look for all ISACA communications . Follow the guidelines below whenever writing the following pieces of information .

Web Addresses

When we write web addresses on any communications, do not include “www .” For example, write the ISACA web address “isaca.org” on all communications . For all communications involving a friendly url, we need to include “www .”

Email Signatures

1 Name / Company / Title / Contact

The signature should lead with your full name, followed by the company, then your title, and finally your contact information (Phone, Mobile, Fax, as applicable) . Shorthand should be used for the contact information (P for Phone, M for Mobile, F for Fax) .

Typeface: Calibri Regular and Bold (name, P, M and F bold) Size:14pt . Color: Hex 636363 | RBG 99, 99, 99

2 More Statement

MORE statements are reflective of your line of business, with multiple choices to select from . These messages ladder up to the new creative platform, and help create interest and awareness of the various aspects of ISACA . The statements are PNG files, which are pulled from a library that can grow and change over time .

3 CTA

Specific calls to action can be customized for various conferences, or other individual needs, but should follow the basic formatting provided . They are hyperlinked, and lead to the appropriate landing pages .

Typeface: Calibri Bold (all caps) Size:14pt . Color: Hex a30046 | RBG 163, 0, 70


VISIT ISACA’S KNOWLEDGE CENTER >

See the full example on page 73

Claudia HenaoISACA/ITGIMarketing Manager for Conferences and EducationP: +1.847.660.5737 | C: +1.847.309.9271


© 2014 ISACA. All Rights Reserved. Brand Guidelines.

Contact Information

When designing a brochure, publication, or other similar document where you must list the ISACA Headquarters contact information, the information should be written as shown below .

Note the following:

• Words like “Road” and “Suite” are spelled out, not abbreviated .

• Sections of the address are separated by a space, vertical line, and another space .

• Phone and fax are designated with “P:” and “F:”

• Phone and fax numbers are listed with “+ 1” before the number, to help our international audience

• Always include the general information email, “[email protected]”

• List the ISACA web address without the “www”, so it should read “isaca .org” and be bold and italicized .


3701 Algonquin Road Suite 1010 Rolling Meadows, IL 60008 USA

P + 1.847.253.1545F + 1.847.253.1443

[email protected]

isaca.org

If you have suggestions or requests for future signatures, please contact: [email protected]

Email Signatures continued

1

NAME / COMPANY / TITLE / CONTACTThe signature should lead with your full name, followed by the company, then your title, and finally your contact information (Phone, Mobile, Fax, as applicable). Shorthand should be used for the contact information (P for Phone, M for Mobile, F for Fax).

Typeface: Calibri Regular and Bold (name, P, M and F bold) Size:14pt. Color: Hex 636363 | RBG 99, 99, 99

MORE STATEMENTMore statements are reflective of your line of business, with multiple choices to select from. These messages ladder up to the new creative platform, and help create interest and awareness of the various aspects of ISACA. The statements are PNG files, which are pulled from a library that can grow and change over time.

CTASpecific calls to action can be customized for various conferences, or other individual needs, but should follow the basic formatting provided. They are hyperlinked, and lead to the appropriate landing pages.

Typeface: Calibri Bold (all caps) Size:14pt. Color: Hex a30046 | RBG 163, 0, 70

The new email signature structure is designed to reinforce the “MORE” creative platform and bring consistency to ISACA email communications, while allowing for some customization. The signature options are broken into four categories: Conferences, Membership, Certifications, and a Universal or time-based version.

EMAIL SIGNATURE STYLE GUIDE

1

1

2

2

3

3

Claudia HenaoISACA/ITGIMarketing Manager for Conferences and EducationP: +1.847.660.5737 | C: +1.847.309.9271

brand guidelines - shamrockresource.com...isaca brand guidelines | 4 2. isaca brand positioning...

Documents