ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Ts. Alan Yau, Director, Technology & Cybersecurity Leader, ALE Advisory, M.Sc., CISA, CISM, CGEIT, CRISC, CDPSE, AAISM, AAIA, AAIR

Featured Blog

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

One of the questions I get asked quite often is, “If I want to move into AI, should I focus on risk, security, or audit first?”

My answer is usually: it depends on where you are in your career today.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1521 Results

Blog Post

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

ISACA's Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM) and Advanced in AI Audit (AAIA) certifications provide three complementary perspectives that organizations need to adopt AI responsibly.

24 June 2026

Blog Post

CMMI AIM Provides Path for Responsible AI Integration

The new CMMI Artificial Intelligence Maturity (CMMI AIM) model provides a structured path for organizations to integrate AI responsibly and effectively.

23 June 2026

Blog Post

Ten Bonus Questions with Theresa Payton

ISACA Conference North America keynote speaker Theresa Payton shares her perspective around cybersecurity and AI metrics, upskilling employees, preparing for quantum computing threats, and more.

22 June 2026

Blog Post

When AI Joins the Party, Vulnerability Backlogs Become Fiction

A clean vulnerability backlog is not necessarily a sign that an organization is well prepared to thwart cyber attackers.

18 June 2026

Blog Post

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The attack surface within an enterprise has increased in a manner that most governance frameworks did not envision. With organizations moving to deploy neurotechnology at scale, they are creating a type of data that their current classification schemas were not designed to deal with.

17 June 2026

Blog Post

The Unwitting Accomplice Behind the Modern Insider Threat

Artificial intelligence agents, copilots, orchestration frameworks, autonomous workflows, machine identities, and more operate with trusted access across enterprise environments, resetting the insider threat landscape.

16 June 2026

Blog Post

CMMC as a Business Design Decision, Part 3: Measure What Leadership Cares About

Explore key metrics that help to connect CMMC to business outcomes that resonate with boards of directors and executive leadership.

11 June 2026

Blog Post

Unlocking Security: How a Routine Audit Transformed Secrets Management at a Multinational Conglomerate

A routine audit revealing hardcoded API keys in a multinational conglomerate's CI/CD pipeline set in motion a recalibration of their secrets management, underscoring the importance of addressing blind spots for increased security, efficiency and agility.

10 June 2026

Blog Post

The Audit Evidence Crisis: How AI Deepfakes Are Rewriting Assurance Standards

With AI creating flawless deepfakes, auditors can no longer afford to start with trust; auditors must begin with zero trust, verify relentlessly, and only then decide what can be trusted.

8 June 2026

Blog Post

Cyber Readiness as Competitive Advantage in the AI Era

Forward-thinking companies can leverage AI-enabled simulations and readiness programs to build robust cyber resilience.

5 June 2026

Cover illustration of a cube integrated with a network, representing concepts of connectivity and technology.

Blog Post

Blockchain Auditing in Practice: What Executives Need to Understand Now

Blockchain systems do not eliminate risk, but rather shift its location, requiring executives to understand where control truly lives in these environments.

3 June 2026

Blog Post

AI’s Impact on ISACA Certification Pay Premiums: Demand Growing for Governance, Audit and Risk Expertise

CISA, CRISC and CGEIT are among only 17 of 663 industry IT certifications to make Foote Partners’ “Hot List” of certifications earning well above average cash pay premiums in early 2026.

2 June 2026

Blog Post

Managing Malevolent AI Agents

Artificial intelligence agents are not secured by making them behave, but rather by ensuring that even if they do not, they are not able to cause material harm.

29 May 2026