The Evolution of the Global Information Environment

Author: Allen Ari Dziwa

Board committees focused on technology and cybersecurity, when properly constituted, have a better ability to provide effective governance and critical scrutiny, which guides management in identifying and mitigating cyberrisk.

Author: Sarantos Kefalas

To make compliance efficient and effective, all neccessary requirements must be combined, baselines established and one global information security management system developed.

Author: Josh Scarpino

It is critical that organizations understand and embed ethics when developing and implementing emerging technologies, thereby validating their responsible technology processes throughout the life cycle.

Author: Noam Koriat

To remain innovative, the internal audit function needs to adjust its activities and value propositions to align with the demands of the 4IR era.

Author: Sasidhar Duggineni

Updating the traditional software development methodology to include data risk-based development enables organizations to avoid any penalties that may be imposed due to a lack of controls and noncompliance with regulations and laws.

Author: Jacob Zwicki

By acknowledging the complexities of security and cooperating with the element of fear, enterprises are empowered to focus on their most critical sources of risk.

Author: Mick Brady

The Israeli government’s new demands on financial institutions tasked a cyber operations manager employed at one of the largest financial institutions in Israel with establishing a new cyberops team within the infosec department to develop a plan for achieving compliance, among other responsibilities.

Author: Luigi Sbriz

Performance and risk indicators are essential sources for measuring the effectiveness of the protection measures adopted.

Authors: Karthik Trichur Sundaram and Divya Karthik

Digital twin technology using AI and ML in the automotive industry can enhance the overall design and efficiency of automotives; however, these technologies pose cybersecurity risk.

Author: Steven Ross

We have been valuing and evaluating security based on the absence of breaches. A much more positive approach is to project the value of security in terms of quality, reliability and value to the customer.

Author: Cindy Baxter

Risk management, governance and controls, audit verification, and validation that the intended use and benefits of the software are achieved help elevate the maturity of the healthcare information flow.

Author: John De Santis

As the incoming chair of the ISACA Board of Directors, how do you see ISACA growing and adapting to the constantly changing workplace and needs of its constituents over the next year?

Author: K. Brian Kelley

The DTEF spans all parts of the enterprise, as can be clearly seen by examining either the Culture or Architecture domains.

Author: Ed Moyle

A look at the software supply chain through the lens of an SBOM—what it is, how it can help you, and how you can adapt your own program to practically incorporate it.