ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Featured Blog

When Intelligence Becomes a Controlled Capability

When a government can remove one of the world’s most advanced AI systems from global circulation in a single evening, something fundamental has changed.

The most interesting thing about the recent Anthropic dispute isn’t whether a jailbreak existed. It’s that a government demonstrated it could effectively switch off access to one of the world’s most advanced AI systems with a single directive.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1531 Results

Blog Post

Why I Took AAISM, and How I Prepared to Pass

Taking the AAISM exam could be the differentiator in your career at a time when understanding AI-specific threats and opportunities is a high priority for many organizations.

15 July 2026

Blog Post

When Intelligence Becomes a Controlled Capability

As frontier AI systems grow in capability, governments are viewing them as strategic assets that impact cybersecurity, intelligence, economic competitiveness and national security.

13 July 2026

Blog Post

The AI Intervention Layer: From AI Proof to Runtime Control

Effective artificial intelligence governance amid a complex threat landscape calls for decision-capable enforcement at runtime.

10 July 2026

Blog Post

The Browser Is the New Security Enforcement in Hybrid Work

The perimeter has evolved into a dynamic, user-defined construct, but there are key steps security practitioners can take to keep pace.

7 July 2026

Blog Post

Making AI-Powered Audits Understandable: A Practical Guide Using COBIT EDM05

While AI is rapidly transforming internal audits, promising faster insights and broader coverages than traditional audit approaches, many stakeholders don't fully understand how AI works or why they should trust it.

6 July 2026

Blog Post

Vulnerability Is Not a Bug: It’s a State of Being

The moment we treat vulnerability as a checklist item to close instead of a condition to continuously manage, we are asking for trouble.

2 July 2026

Blog Post

The CISO vs. Shadow AI Cold War

Organizations' biggest artificial intelligence risk may not be the model, but how shadow AI is being adopted across the enterprise.

1 July 2026

Blog Post

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

In an era of intensifying geopolitical competition, the sea is an often overlooked domain where matters of economic security, national resilience, technological advantage and state power overlap.

30 June 2026

Blog Post

Not Yet in the Boardroom, and Why That Is Exactly the Point

The value of voluntary work might lead to immediate rewards, but the cumulative effect of volunteering eventually becomes transformative.

29 June 2026

Blog Post

Recognizing Excellence and Encouraging Future Generations: 2027 ISACA Awards Nominations Now Open

Nominations for the 2027 ISACA Awards are open, providing the opportunity to recognize those who have made outstanding contributions to the ISACA professional community.

25 June 2026

Ts. Alan Yau, Director, Technology & Cybersecurity Leader, ALE Advisory, M.Sc., CISA, CISM, CGEIT, CRISC, CDPSE, AAISM, AAIA, AAIR

Blog Post

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

ISACA's Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM) and Advanced in AI Audit (AAIA) certifications provide three complementary perspectives that organizations need to adopt AI responsibly.

24 June 2026

Blog Post

CMMI AIM Provides Path for Responsible AI Integration

The new CMMI Artificial Intelligence Maturity (CMMI AIM) model provides a structured path for organizations to integrate AI responsibly and effectively.

23 June 2026

Blog Post

Ten Bonus Questions with Theresa Payton

ISACA Conference North America keynote speaker Theresa Payton shares her perspective around cybersecurity and AI metrics, upskilling employees, preparing for quantum computing threats, and more.

22 June 2026

Blog Post

When AI Joins the Party, Vulnerability Backlogs Become Fiction

A clean vulnerability backlog is not necessarily a sign that an organization is well prepared to thwart cyber attackers.

18 June 2026

Blog Post

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The attack surface within an enterprise has increased in a manner that most governance frameworks did not envision. With organizations moving to deploy neurotechnology at scale, they are creating a type of data that their current classification schemas were not designed to deal with.

17 June 2026

ISACA Now By Year

ISACA Now Blog

When Intelligence Becomes a Controlled Capability

ISACA Career Catalyst Member Stories

View Recent Posts

Layout

Filters

Subjects

Domain

Credentials

Why I Took AAISM, and How I Prepared to Pass

When Intelligence Becomes a Controlled Capability

The AI Intervention Layer: From AI Proof to Runtime Control

The Browser Is the New Security Enforcement in Hybrid Work

Making AI-Powered Audits Understandable: A Practical Guide Using COBIT EDM05

Vulnerability Is Not a Bug: It’s a State of Being

The CISO vs. Shadow AI Cold War

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

Not Yet in the Boardroom, and Why That Is Exactly the Point

Recognizing Excellence and Encouraging Future Generations: 2027 ISACA Awards Nominations Now Open

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

CMMI AIM Provides Path for Responsible AI Integration

Ten Bonus Questions with Theresa Payton

When AI Joins the Party, Vulnerability Backlogs Become Fiction

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The Unwitting Accomplice Behind the Modern Insider Threat

CMMC as a Business Design Decision, Part 3: Measure What Leadership Cares About

Unlocking Security: How a Routine Audit Transformed Secrets Management at a Multinational Conglomerate

The Audit Evidence Crisis: How AI Deepfakes Are Rewriting Assurance Standards

Cyber Readiness as Competitive Advantage in the AI Era

Blockchain Auditing in Practice: What Executives Need to Understand Now

AI’s Impact on ISACA Certification Pay Premiums: Demand Growing for Governance, Audit and Risk Expertise

Managing Malevolent AI Agents

The Strategic ROI of Privacy-Enhancing Technologies (PETs) in the AI Era

Cloud Security Posture Management: The Control Plane for Modern Cloud Risk

Future to Bring New Tasks, Same Purpose for ISACA Members

When Cybersecurity Met Soccer: The World’s Most Beautiful Game Meets the World’s Most Complex Digital Challenges

Five Questions Leaders Should Answer Before Piloting Advanced AI or Quantum-Enabled Systems

Remembering Founding ISACA Member Eugene Frank

Preparing for a Quantum Future: Navigating Accelerated Timelines for Secure Encryption

CMMC as a Business Design Decision, Part 2: Lock Your Architecture and Govern the Build

Taking the Myth out of Claude Mythos

When AI Joins the Party, Credentials Become the Weapon: Fix Access Without Slowing Delivery

Pillars For Vetting Vendors for a Sturdier Supply Chain

The AI Security Gap: Adoption Is Accelerating, but Response Capability Is Lagging

Vanishing Boundaries: Leading Member Innovation in a World of AI, Cyber and Vibe Coding

AI Assurance vs. AI Governance

A Proven Seven-Step Process to Accelerate Cybersecurity Transformation

RSA 2026: The Agent Revolution Is Already Here

CMMC as a Business Design Decision, Part 1: Decide What Work You Want

Leadership in Risk: The Strategic Advantage of Adding AAIR to Your Credentials

Security Debt Is Eating Your Organization Alive

Volunteer Appreciation Week: ISACA Volunteers Share Journeys and Advice

The Security Metrics That Lie

Meet ISACA's 2026 Global Achievement Award Winners

ISACA’s Critical Work of Growing Capacity Across CMMC Ecosystem

The Future of Software Delivery: Why "Shift-Left" Security is Your Competitive Advantage

AI Risk in Practice: How Structured Capability Changes Outcomes

When AI Joins the Party, Five Lines Beat Fifty Slides

Agentic AI Evolution and the Security Claw

The New Battleground for ICS/OT: Why AI-Driven Defense is Becoming Essential for ICS/OT Cybersecurity

Who AAIR is for, and When It’s the Right Credential

Five Signs your Organization is Underestimating AI Risk at Senior Levels

When Transitioning off the Board, Choose the Graceful Path

Understanding the Ethical Impacts of AI Systems

Combining Risk Management with the Sales Process for Greater Success

Does Claude Have a Security Problem?

How Basic Principles of Access and Identity Can Prevent Major Security Crises

Setting the Baseline for Secure Software: Why the Code of Practice Matters

AI Pulse Poll Reveals Rampant Uncertainty on Enterprise Landscape

Beyond the Frame: Strengthening the Future of Technology Through the SheLeadsTech Chicago–WECode Harvard University Partnership

Securing the AI Frontier: A Practical Framework for Assessing AI Coding Assistant Vulnerabilities

The CISO’s Dilemma: When Your Employees’ Thoughts Become Attack Vectors

When AI Joins the Party, Assurance Checks the Receipts Before the Board Gets the Bill

What Failing the AAIA Taught Me About Resilience, Learning and Our Shared Journey

Four Emerging AI Risk Areas for Digital Trust Professionals in 2026

Why CISA and CGEIT Are Outperforming the Certification Market in 2026

Rising While Lifting Others: SheLeadsTech Scholars Share Their Journeys and Inspirations

CMMC Program Provides New Career Pathways for ISACA Members

The Socio-Technical Playbook: Practical Patterns for Security Culture

The DeFAI Revolution: Unlocking a Democratic and Intelligent Financial Future