All Roads Lead to Risk

Expand your knowledge about risk and how to manage it.

Featured Articles

The Practical Aspect: Small Business Interruptions

Authors: Vasant Raval and Rajesh Sharma

According to the Allianz Risk Barometer 2019, for the seventh year in a row, executives and insurance experts worldwide are most concerned about business interruption risk scenarios.

ISACA Journal Article

Moving Risk Management From Fear and Avoidance to Performance and Value

Author: Brian Golumbeck

For cybersecurity professionals, the nature of risk management is evolving from an outside-in fear-and-avoidance approach to a strong inside-out approach.

Additional languages available: Português

A Model and Best Practices for Risk Transformation Banner

ISACA Journal Article

A Model and Best Practices for Risk Transformation

Author: David Vohradsky

Increasing globalization and the associated business transformation mean that enterprises are now complex networks dependent on both the nodes within other organizations and the nodes within the same organization.

ISACA Journal Article

The First Steps of Quantitative Risk Management

Author: Ignacio Marambio Catán

Things have been changing in the risk management arena these last few years.

ISACA Journal Article

Advanced Analytics for Technology Risk

Author: Mukul Pareek

Over the decades, information systems security has evolved in many ways.

Additional languages available: Português

ISACA Journal Article

Successful Outcomes by Crowdsourcing Risk Management

Author: Mike Saurbaugh

Crowdsourcing cybersecurity risk management across the enterprise presents opportunities for security leaders to bolster their program resilience through other resources.

ISACA Journal Article

Auditing Amazon Web Services

Author: Adam Kohnke

As organizations increase adoption of cloud services for running enterprise architecture and applications, auditors are required to step up their game and learn new in-depth audit skills.

Columns

ISACA Journal Article

Guest Editorial: ISACA—50 Years of Keeping Pace With Changing Technology

Author: Robert G. Parker

Anniversaries always spark the desire to revisit the events that have taken us from then to now. ISACA’s 50th anniversary is no exception.

ISACA Journal Article

Information Security Matters: Does IT Auditing Still Make Sense?

Author: Steven J. Ross

IT auditors are important to information security and have been since the auditing profession realized it needed to get hip to machines in the basement that were eating their balance sheets.

ISACA Journal Article

IS Audit Basics: Developing the IT Audit Plan Using COBIT 2019

Author: Ian Cooke

The IT Assurance Framework (ITAF) requires that the IS audit and assurance function shall use an appropriate risk assessment approach and supporting methodology to develop the overall IS audit plan.

ISACA Journal Article

The Network: Mais Barouqa

Author: ISACA

What is the biggest security challenge that will be faced in 2019?

ISACA Journal Article

Innovation Governance: Innovation and the Auditor

Author: K. Brian Kelley

Innovation teams research new and innovative ways for the business to compete. This usually means accelerating a development cycle.

Online Exclusives

ISACA Journal Article

Access Controls Over Third-Party Applications

Author: Kathleen Martin

With an increasing focus on and potential exposure to confidential data, and every organization must take the appropriate precautions to secure customer data.

ISACA Journal Article

Bulletproof Risk Management to Thrive in the Digital Economy

Author: Sudhakar Sathiyamurthy

Digital technologies have profoundly changed lives, blurring the lines between the digital and physical worlds.

ISACA Journal Article

Incident Management for ERP Projects

Author: Rajul Kambli

A bad plan with good execution can be considered a dream come true, but a good plan with poor execution can be a nightmare.

ISACA Journal Article

Practical Cyberrisk Management

Author: Jaco Cloete

Cybersecurity and information security (cyber) professionals, staff, managers and board members are faced with the real issue of how to deal with cyberrisk, and this is a high priority for board members.

ISACA Journal Article

Practical Patch Management and Mitigation

Author: Spiros Alexiou

Patches are quick fixes of known software bugs that presumably were not known at the time that the software was released.

ISACA Journal Article

The Non-IT Manager’s Role in Enterprise IT Risk Management

Authors: Nishani Edirisinghe Vincent, and Vinod U. Vincent

The impact of IT on business operations cannot be ignored in today’s business environment.

ISACA Journal Article

The Sheer Gravity of Underestimating Culture as an IT Governance Risk

Author: Guy Pearce

For those who may think that any form of governance of enterprise IT (GEIT) is better than no IT governance, it is important to consider the fact that poor IT governance is a significant, documented cause of IT failure.

ISACA Journal Article

Three Ideas for Cybersecurity Risk Management

Author: Sakthivel Rajendran

The terms “information security” and “cybersecurity” are commonly used to address risk to information.