The enterprise mission, strategy and objectives are the basis for understanding the dynamic risk landscape in which the enterprise operates. Whether an organization is public or private, for profit or nonprofit, government or military, it has a mission to deliver value to stakeholders and customers. Read More >>

Monitoring information system security is an established management practice. It ensures compliance for both information security and privacy. Data protection and compliance maturity levels also help establish how to align with information assurance programs. Read More >>

Do you know outstanding colleagues who have dedicated themselves to advancing ISACA’s core areas of audit, information security, risk and IT governance? Have you worked with an outstanding volunteer who has contributed to ISACA’s success? Read More >>

Email delivery is the primary source of malware dissemination. Cyberattackers rely on phishing attacks because they work and easily can target users several times a month. While enterprises do invest both large amounts of time and effort into mitigating phishing attacks, these attacks continue to be effective. Read More >>