Trust in Technology

Author: Paul Lucier

If quantum migration were a train, it would be a cryptoagility train with the destination quantum readiness. All aboard!

Author: Andrej Volchkov

Having reliable metrics or key performance indicators (KPIs) in the field of information security is a prerequisite to building a successful security program. Measuring operational efficiency, costs and benefits has always been a concern for managers, and information security is no exception.

Author: Ed Moyle

Most practitioners know that support for open-source software can sometimes be a loaded question for an organization. From a usage point of view, there are a few concerns. Organizations worry about compliance with open-source licenses— fearing, for example...

Author: Deepa Seshadri

Since the beginning of 2020, communities throughout the world—personal and professional—have been impacted in a way that was always only talked about in hypothetical scenarios, such as running an organization completely virtually.

Author: Grace F. Johnson

It has been 10 years since John Kindervag, then with Forrester Research, first laid out the information systems security concept called the zero trust model. In the decade since, few organizations could boldly claim that their information technology environments were safe from hazards and threats emanating from the inside and outside.

Author: Srinidhi Mallur

Cybersecurity risk assessment is a nebulous process that requires a delicate balance between art and science. Typically, a risk assessor begins by collecting relevant information for all the identified risk factors. The assessor gathers information from logs, architecture diagrams, network topology...

Author: ISACA

An up-to-date listing of the current IT Audit and Assurance Standards, Guidelines, and Tools and Techniques...

Author: Steven J. Ross

In my previous article, I stated that “serious cyberattacks seem no worse than before” the COVID-19 pandemic. Whenever anyone qualifies a categorical statement, the qualifier is always awfully important. In this case, it invites the question, “Just what is a trivial cyberattack?”

Author: Ian Cooke

I am sitting down to write this column in mid-August, which, believe it or not, is quite late for an ISACA Journal vol. 6 column (at least for me). The reason? After 3.5 years and 21 articles, I have decided that this will be my last column.

Author: Dustin Brewer

When humans first domesticated wolves, the implications of the symbiotic relationships could not have been foreseen. We (humans) were slowly able to somewhat let down our guards while sleeping with our trusty companions on guard and place some of our hunting burdens on our furry friends.

Author: K. Brian Kelley

Once upon a time, in order to secure a computer, an organization only had to worry about physical security. After all, computers took up an entire room and were programmed using punch cards that were fed into them. However, as computer technology progressed...

Authors: Vasant Raval and Samir Shah

The need for privacy is increasing at an unprecedented rate. It cuts across technologies and work models, especially the new ones, that create opportunities for and facilitate the management of personally identifiable information (PII).