ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Featured Blog

The Framework to Manage Frameworks: COBIT and the Governance Gap

Every enterprise is carrying governance debt, and most don’t know the balance is due.

We talk constantly about technical debt: the shortcuts in code and architecture that compound quietly until the system buckles. Governance debt works the same way. Organizations layer new technology, new policy and new urgency onto old structures, the same committees, the same decision rights, the same evidence mechanisms, without ever modernizing the foundation.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1540 Results

Blog Post

Three Highly Actionable Steps to Strengthen Your Leadership Team’s Cyber Crisis Readiness

Cybersecurity crisis readiness is measured by how quickly leaders are able to establish control while the facts are unclear and pressure continues to escalate.

5 August 2026

Blog Post

The Framework to Manage Frameworks: COBIT and the Governance Gap

The gap between the speed of technology and how slowly governance adapts represents a massive challenge that COBIT is equipped to address.

4 August 2026

Blog Post

Software Liability at a Tipping Point

Software manufacturers and vendors should learn from past industry mistakes and accept responsibility for the safety of their products.

30 July 2026

Blog Post

Vibe Coding and the AI Security Governance Gap

Vibe coding lets non-developers create applications quickly with artificial intelligence, dramatically increasing productivity but also making it easier to deploy insecure software outside traditional security, governance and review processes.

29 July 2026

Blog Post

Architecting Third-Party Resilience to Safeguard Business Value

The sheer volume of third-party relationships and the rapidly evolving cyber risk landscape demand that business leaders implement adaptive, pragmatic TPRM programs — rooted in board-approved risk appetite and aligned with strategic goals.

28 July 2026

Blog Post

Three High-Impact Identity Strategies for Security Leaders in the Age of AI

Moving to behavior-based identity authentication is an effective first step is to replacing traditional multi-factor authentication and mitigating identity-related cyber threats.

24 July 2026

Blog Post

Executable Compliance: Why Regulation Is Becoming Infrastructure

For many organizations, compliance still is not data-based, preventing them from achieving numerous benefits and a sustainable competitive advantage.

22 July 2026

Blog Post

When AI Joins the Party, Model Integrity Becomes Business Continuity

A lack of clarity about what models are running, how they are operating and how they can be addressed if something goes wrong presents major risk to organizations in the era of artificial intelligence.

21 July 2026

Mansoor Ahmad Khan, Fellow BCS, CISSP, CISM, GIAC Advisory Board

Blog Post

Modern Day CISO: Navigating from Technical Gatekeeper to Strategic Business Leader

The modern CISO has evolved from being a technical gatekeeper to a strategic business leader who bridges technical resilience with corporate strategy, navigating global regulations, quantifying cyber risks in financial terms and aligning AI and continuous compliance with business goals.

17 July 2026

Blog Post

Why I Took AAISM, and How I Prepared to Pass

Taking the AAISM exam could be the differentiator in your career at a time when understanding AI-specific threats and opportunities is a high priority for many organizations.

15 July 2026

Blog Post

When Intelligence Becomes a Controlled Capability

As frontier AI systems grow in capability, governments are viewing them as strategic assets that impact cybersecurity, intelligence, economic competitiveness and national security.

13 July 2026

Blog Post

The AI Intervention Layer: From AI Proof to Runtime Control

Effective artificial intelligence governance amid a complex threat landscape calls for decision-capable enforcement at runtime.

10 July 2026

Blog Post

The Browser Is the New Security Enforcement in Hybrid Work

The perimeter has evolved into a dynamic, user-defined construct, but there are key steps security practitioners can take to keep pace.

7 July 2026

Blog Post

Making AI-Powered Audits Understandable: A Practical Guide Using COBIT EDM05

While AI is rapidly transforming internal audits, promising faster insights and broader coverages than traditional audit approaches, many stakeholders don't fully understand how AI works or why they should trust it.

6 July 2026

Blog Post

Vulnerability Is Not a Bug: It’s a State of Being

The moment we treat vulnerability as a checklist item to close instead of a condition to continuously manage, we are asking for trouble.

2 July 2026

ISACA Now By Year

ISACA Now Blog

The Framework to Manage Frameworks: COBIT and the Governance Gap

ISACA Career Catalyst Member Stories

View Recent Posts

Layout

Filters

Subjects

Domain

Credentials

Three Highly Actionable Steps to Strengthen Your Leadership Team’s Cyber Crisis Readiness

The Framework to Manage Frameworks: COBIT and the Governance Gap

Software Liability at a Tipping Point

Vibe Coding and the AI Security Governance Gap

Architecting Third-Party Resilience to Safeguard Business Value

Three High-Impact Identity Strategies for Security Leaders in the Age of AI

Executable Compliance: Why Regulation Is Becoming Infrastructure

When AI Joins the Party, Model Integrity Becomes Business Continuity

Modern Day CISO: Navigating from Technical Gatekeeper to Strategic Business Leader

Why I Took AAISM, and How I Prepared to Pass

When Intelligence Becomes a Controlled Capability

The AI Intervention Layer: From AI Proof to Runtime Control

The Browser Is the New Security Enforcement in Hybrid Work

Making AI-Powered Audits Understandable: A Practical Guide Using COBIT EDM05

Vulnerability Is Not a Bug: It’s a State of Being

The CISO vs. Shadow AI Cold War

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

Not Yet in the Boardroom, and Why That Is Exactly the Point

Recognizing Excellence and Encouraging Future Generations: 2027 ISACA Awards Nominations Now Open

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

CMMI AIM Provides Path for Responsible AI Integration

Ten Bonus Questions with Theresa Payton

When AI Joins the Party, Vulnerability Backlogs Become Fiction

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The Unwitting Accomplice Behind the Modern Insider Threat

CMMC as a Business Design Decision, Part 3: Measure What Leadership Cares About

Unlocking Security: How a Routine Audit Transformed Secrets Management at a Multinational Conglomerate

The Audit Evidence Crisis: How AI Deepfakes Are Rewriting Assurance Standards

Cyber Readiness as Competitive Advantage in the AI Era

Blockchain Auditing in Practice: What Executives Need to Understand Now

AI’s Impact on ISACA Certification Pay Premiums: Demand Growing for Governance, Audit and Risk Expertise

Managing Malevolent AI Agents

The Strategic ROI of Privacy-Enhancing Technologies (PETs) in the AI Era

Cloud Security Posture Management: The Control Plane for Modern Cloud Risk

Future to Bring New Tasks, Same Purpose for ISACA Members

When Cybersecurity Met Soccer: The World’s Most Beautiful Game Meets the World’s Most Complex Digital Challenges

Five Questions Leaders Should Answer Before Piloting Advanced AI or Quantum-Enabled Systems

Remembering Founding ISACA Member Eugene Frank

Preparing for a Quantum Future: Navigating Accelerated Timelines for Secure Encryption

CMMC as a Business Design Decision, Part 2: Lock Your Architecture and Govern the Build

Taking the Myth out of Claude Mythos

When AI Joins the Party, Credentials Become the Weapon: Fix Access Without Slowing Delivery

Pillars For Vetting Vendors for a Sturdier Supply Chain

The AI Security Gap: Adoption Is Accelerating, but Response Capability Is Lagging

Vanishing Boundaries: Leading Member Innovation in a World of AI, Cyber and Vibe Coding

AI Assurance vs. AI Governance

A Proven Seven-Step Process to Accelerate Cybersecurity Transformation

RSA 2026: The Agent Revolution Is Already Here

CMMC as a Business Design Decision, Part 1: Decide What Work You Want

Leadership in Risk: The Strategic Advantage of Adding AAIR to Your Credentials

Security Debt Is Eating Your Organization Alive

Volunteer Appreciation Week: ISACA Volunteers Share Journeys and Advice

The Security Metrics That Lie

Meet ISACA's 2026 Global Achievement Award Winners

ISACA’s Critical Work of Growing Capacity Across CMMC Ecosystem

The Future of Software Delivery: Why "Shift-Left" Security is Your Competitive Advantage

AI Risk in Practice: How Structured Capability Changes Outcomes

When AI Joins the Party, Five Lines Beat Fifty Slides

Agentic AI Evolution and the Security Claw

The New Battleground for ICS/OT: Why AI-Driven Defense is Becoming Essential for ICS/OT Cybersecurity

Who AAIR is for, and When It’s the Right Credential

Five Signs your Organization is Underestimating AI Risk at Senior Levels

When Transitioning off the Board, Choose the Graceful Path

Understanding the Ethical Impacts of AI Systems

Combining Risk Management with the Sales Process for Greater Success

Does Claude Have a Security Problem?

How Basic Principles of Access and Identity Can Prevent Major Security Crises

Setting the Baseline for Secure Software: Why the Code of Practice Matters

AI Pulse Poll Reveals Rampant Uncertainty on Enterprise Landscape

Beyond the Frame: Strengthening the Future of Technology Through the SheLeadsTech Chicago–WECode Harvard University Partnership

Securing the AI Frontier: A Practical Framework for Assessing AI Coding Assistant Vulnerabilities