Governance of IT, OT and IoT

Learn more about the governance of emerging technology and much more.

Featured Articles

Authors: Jean Jacques Raphael, Jean Claude Célestin and Eric Romuald Djiethieu

The chaos theory was discovered in the mathematics field and began to be observed in daily life during the second half of the 20th century.

Additional languages available: Français

ISACA Journal Article

Evolving From Qualitative to Quantitative Risk Assessment

Author: Benoit Heynderickx

It is only recently that quantitative risk for information security has been introduced as a possible evolution from qualitative risk methodologies.

ISACA Journal Article

IS Audit Basics: Lessons From History

Author: Ian Cooke

So, and in case you have been living in a cave somewhere, ISACA is 50—a significant historical milestone. Here are the lessons we've learned along the way.

ISACA Journal Article

Understanding Compliance Risk in Finance and Banking

Author: Muhammad Waheed Qureshi

Banks need to design automatic & continuous risk assessments that align with compliance & regulatory issues.

ISACA Journal Article

The Pain of Automation

Authors: Wade Cassels, Jane Traub, Kevin Alvero, and Jessica Fernandez

Internal audit leaders are looking at automation technologies for many of the same reasons as business management.

Additional languages available: Français

ISACA Journal Article

Acknowledging Humanity in the Governance of Emerging Technology and Digital Transformation

Author: Guy Pearce

Artificial intelligence (AI) and robotics have captured the imagination of humans. A quick search for AI and robotics in pop culture finds that it stretches back to Mary Shelley’s book.

Additional languages available: Français

ISACA Journal Article

The Internet of Medical Things—Anticipating the Risk

Author: Mohammed Khan

The Internet of Medical Things (IoMT) is and has been a driving force of the networked medical device landscape ecosystem.

ISACA Journal Article

Rethinking Risk

Author: Rajesh Srivastava

Not all that long ago, getting the enterprise to invest in IT required some convincing.

ISACA Journal Article

Three Strategies for a Successful DevSecOps Implementation

Author: Taimur Ijlal

The DevSecOps methodology movement began in response to security concerns with the DevOps methodology.

ISACA Journal Article

Bridging the Gap Between Policies and Execution in an Agile Environment

Authors: Mina Miri, Amir Pourafshar, Pooya Mehregan, and Nathanael Mohammed

With the perpetual occurrence of high-profile attacks and data breaches caused by software vulnerabilities, a new trend known as secure by design (“shifting left”) has gradually shaped the software world.

ISACA Journal Article

Analyst and Adversary

Author: Jeimy J. Cano M.

Each year, reports of new threats and security breaches reveal the ever-increasing sophistication of attackers and their methods for outwitting available control mechanisms.

Additional languages available: Español

Columns

ISACA Journal Article

Information Security Matters: Someone Else

Author: Steven J. Ross

Running an IT department used to be so simple. The programmers wrote programs; the technicians migrated the programs into production; and the operators ran them. Learn how this has changed.

ISACA Journal Article

Innovation Governance: The Balance of Speed and Protection in Innovation

Author: K. Brian Kelley

Organizations embrace innovation in order to outcompete others in their space. The mission in audit is to protect the business.

ISACA Journal Article

The Network: Brennan P. Baybeck

Author: Brennan P. Baybeck

What is the biggest security challenge being faced in 2019?

ISACA Journal Article

HelpSource Q&A

Author: Sunil Bakshi

Is enterprise governance of IT (EGIT) relevant for SME organizations?

Online Exclusives

ISACA Journal Article

Auditing Green IT Governance and Management With COBIT 5

Authors: J. David Patón-Romero, Maria Teresa Baldassarre, Moisés Rodríguez, and Mario Piattini

Today’s organizations find themselves facing a relatively new challenge—governing and managing sustainability—since sustainability has become an important issue and is increasingly essential for business.

ISACA Journal Article

Effective User Access Reviews

Author: Sundaresan Ramaseshan

User access review is a control to periodically verify that only legitimate users have access to applications or infrastructure.

ISACA Journal Article

Preparing for the AI Revolution

Author: Adam Kohnke

C-level executives, security professionals, IT technicians and audit managers face constant pressure to assess, assimilate and govern emerging technology, including artificial intelligence (AI).

ISACA Journal Article

Redefining Corporate Governance for Better Cyberrisk Management

Author: Vimal Mani

Corporate governance refers to the set of responsibilities to be fulfilled by the higher-level management structures of an organization, such as the management team, board of directors (BoD), and board and management committees.

ISACA Journal Article

The IoT as a Growing Threat to Organizations

Author: Larry G. Wlosinski

There is a new cyberthreat that is growing with the potential to have major impact on information security and personal privacy.