@ISACA is a biweekly publication available from this page and delivered via email to ISACA members and subscribers. This electronic newsletter features timely industry and ISACA news, as well as features and updates relevant to our readers.

Tips From Industry Experts

Can Organizations Afford Proprietary Models for Third-Party Assessments? By Antonio Ramos Garcia, CISA, CRISC, CISM, Jonah When implementing a third-party risk management or vendor risk management (VRM) program, there are many decisions that must be made: How many levels of criticality should there be? What security requirements should be considered at each level? Read More >>

Take the Next Step in Your Cybersecurity Career ISACA News ISACA is introducing 3 new Cybersecurity Nexus™ (CSX) Cybersecurity Career Pathways course offerings to enable those with prior industry certifications and a strong IT/cybersecurity foundation to prepare for a new role or career advancement. The CSX training environment offers course options for all levels of experience to help cyberprofessionals excel in this rapidly changing industry. Read More >>

The Sheer Gravity of Underestimating Culture as an IT Governance Risk ISACA News Poor IT governance can be even worse than no IT governance. Managing IT risk as part of governance of enterprise IT (GEIT) is a key factor to IT governance success, as discussed in Guy Pearce’s ISACA Journal, volume 3, article, “The Sheer Gravity of Underestimating Culture as an IT Governance Risk.” Read More >>

From mobile payments to the use of artificial intelligence (AI) to the introduction of new security risk, technology has had a profound impact on how the financial sector operates. In this 50^th Anniversary Series episode of the ISACA Podcast, Ashley Holmes, governance and compliance manager at Delta Airlines, analyzes the past, present and current state of financial technology (fintech). Read More >>
 

The North America CACS 2019 conference took place 13-15 May 2019 in Anaheim, California, USA. This conference, which is held for IS audit, assurance, control, governance and security professionals, highlighted the need to face disruptive technology. Read More >>