Get Member-Exclusive Industry Insights from the ISACA Journal

Artifacts like VEX documents can help enterprises ensure clear, defensible decisions when it comes to risk management.

The same models that help organizations achieve their goals can also produce systemic bias.

Organizations must be able to govern data once it starts traveling.

Systematically analyzing threats from the beginning of the design phase enables practitioners to build security into systems in time to make a difference amid a difficult threat landscape.

Push notifications in augmented reality applications carry overlooked risks, and app developers should help mitigate them by working closely with privacy and legal experts

The ISO 27001 Risk Assessment is not just a standard or certification; it can serve as a beacon of trust for a range of stakeholders.

With exponential growth in data, addressing the related privacy, risk and security implications on the data landscape needs to be a top priority for digital trust professionals.

Many of the guardrails that exist in the context of human thinking are not in place for artificial intelligence, which presents a range of significant challenges.