Get Member-Exclusive Industry Insights from the ISACA Journal

Organizations struggle when nobody verifies that policies are enforced in live systems. Two concepts that can mitigate this risk.

When AI produces audit work, what is the audit committee actually trusting?

Enterprises can satisfy security and governance requirements by combining traditional RBAC with modernized methods.

Artifacts like VEX documents can help enterprises ensure clear, defensible decisions when it comes to risk management.

The same models that help organizations achieve their goals can also produce systemic bias.

Organizations must be able to govern data once it starts traveling.

Systematically analyzing threats from the beginning of the design phase enables practitioners to build security into systems in time to make a difference amid a difficult threat landscape.

Push notifications in augmented reality applications carry overlooked risks, and app developers should help mitigate them by working closely with privacy and legal experts