Home / Resources / News and Trends / Industry News

Industry News

A collection of the latest relevant articles providing insight, practical tips and knowledge sharing from experts in security, risk, governance, privacy and audit. Start here for the latest useful original articles from ISACA.

Bhavya Jain
Featured Industry News Article

Collaboration and the New Triad of AI Governance

The rapid deployment of artificial intelligence (AI) across enterprise environments has fundamentally changed how data is collected, processed, and interpreted. As AI systems increasingly influence decisions in finance, healthcare, hiring practices, and public policy, organizations face a growing mandate to ensure that these systems are effective but also lawful, secure, and ethical.

Read More

Industry News Most Recent Articles

Bhavya Jain
Emerging Technology Article

Collaboration and the New Triad of AI Governance

The traditional boundaries between privacy, cybersecurity, and legal functions must give way to integrated governance if organizations are to meet emerging regulatory expectations, reduce systemic risk, and preserve trust in a future increasingly shaped by artificially-derived decisions.

19 September 2025
Collin Beder
Emerging Technology Article

A New Era of App Development

Vibe coding refers to the practice of developing software applications through the use of natural language instructions with the assistance of generative artificial intelligence (gen AI) systems and agentic AI.

17 September 2025
Rashmi Tallapragada
Security Article

Beyond NIST: Why Compliance Standards Fall Short in the PCN World

For most organizations, aligning with the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) feels like a logical choice.

11 September 2025
Nirupam Samanta
Emerging Technology Article

The Growing Challenge of Auditing Agentic AI

Agentic AI presents a growing challenge for audit and governance functions, primarily because its decision-making processes often lack clear traceability.

2 September 2025
Michael Podemski
Audit Article

The Future of IT Audit: Embracing Agile and Continuous Learning

Today's IT auditors are agile, curious, and committed to continuous learning, ensuring that they remain effective and relevant in the face of new challenges.

27 August 2025
Aparna Achanta
Emerging Technology Article

The New Oil, the New Risk: Data Security in the Era of AI, Cloud, and IoT

Securing data is a highly challenging task and is quickly becoming a top priority for organizations as emerging technologies continue to advance and shape the way data is handled.

7 August 2025
Isla Sibanda
Emerging Technology Article

Combating the Threat of Adversarial Machine Learning to AI-Driven Cybersecurity

Due to their vast potential, these tools and their implementation have become the top focus for AI spending in most tech budgets. However, as these technologies become more sophisticated, they also present new vulnerabilities.

5 August 2025
Safia Kazi
Emerging Technology Article

Moving Beyond the AI Hype

The developers of AI products and business leaders may not be asking the important questions—or worse, they are disregarding the troubling answers to these questions...

31 July 2025
Justin Rende
Emerging Technology Article

Organizations Need More Than Book Smart AI

AI excels at processing information but lacks emotional intelligence. Without this, it cannot form human connections or successfully lead within an organization

10 July 2025
Collin Beder
Emerging Technology Article

The Reality of AI: Oversold and Underdelivered

Artificial intelligence (AI), especially generative AI, has been dominating headlines and enterprise conversations in recent years.

3 July 2025
Anirudh Murali
Emerging Technology Article

Safeguarding the Enterprise AI Evolution: Best Practices for Agentic AI Workflows

Agentic AI represents a breakthrough in technological innovation, but the capabilities of AI agents remain somewhat mysterious and warrant further exploration of their essential components. Organizations must understand this new technology and implement proactive security practices to harness agentic AI, a significant force multiplier in recent times.

1 July 2025
Syed Salman
Security Article

Enhancing Security Awareness to Uplift Security Culture

Enterprises are becoming increasingly aware of advanced phishing and social engineering attacks, recognizing that a strong cybersecurity awareness culture is essential for defending against these sophisticated threats.

30 June 2025
Chester Avey
Security Article

Mastering IoT Defense Strategies With Cybersecurity Education

As innovative technologies such as artificial intelligence (AI) and big data analytics evolve and as supply chains become more convoluted and intertwined, the attack surface of organizations deploying a wealth of IoT devices expands significantly.

23 June 2025
Anuj Choudhary
Security Article

Trapped Virtually: Understanding Digital Arrest Scams

As cyberscams grow increasingly complex and difficult to detect, it is imperative that cybersecurity professionals not only recognize the severity of these scams but also take proactive measures to fortify both personal and organizational defenses.

20 June 2025
Bhavya Jain
Security Article

Cyberwargaming in 2025: Why Enterprises Cannot Afford to Skip It

Cybercriminals are constantly refining their tactics, and many organizations fail to keep pace with newly evolved threats due to inadequate security training and obsolete IR plans.

11 June 2025
Chelson Chong, and Meng Fai Chan, CISA, CDPSE, CISSP, GRID
Audit Article

Harnessing GenAI to Improve Audit Work Efficiency Through Proper Planning

GenAI has the potential to improve the audit function’s efficiency and effectiveness. However, the use of GenAI does not come without risk, and organizations should be aware of that risk when implementing GenAI. It is of the utmost importance to identify and mitigate risk before implementing GenAI or any emerging technology.

20 May 2025
VJ Srinivas
Risk Article

Vendor Risk Assessments: Do Organizations Still Need Them?

While it is acceptable and commonplace to have work completed by another vendor based on mutually agreed contracts, the overall management of related risk is a pertinent point of attention.

12 May 2025
Shamnad Shaffi
Security Article

The Zero-ETL Paradigm: Transforming Enterprise Data Integration in Real Time

Zero-ETL offers direct data movement capabilities and advanced cloud technologies and allows for the leveraging of modern architectural patterns to enable real-time data access while significantly reducing operational complexity and costs.

8 May 2025
Nivathan Somasundharam
Security Article

Protecting Kubernetes Clusters and Workloads at Scale

As organizations increasingly adopt Kubernetes for its scalability and flexibility, it is imperative to prioritize the security of both Kubernetes clusters and workloads.

1 May 2025
Collin Beder
Security Article

Post-Quantum Cryptography: A Call to Action

While the world has been laser-focused on artificial intelligence (AI), major advancements are occurring in quantum computing.

28 April 2025
Guy Pearce
Governance Article

Strategic CIO Responses to Today’s Leadership Trends

The strategic chief information officer (CIO) must keep an eye not only on the evolving technology landscape, but also on evolving leadership and governance trends and their inevitable dilemmas, as these factors shape IT strategy and influence the way IT productively enables enterprise value creation.

25 April 2025
Chester Avey
Security Article

Debunking Cybersecurity Myths in 2025

ITis prudent to examine and debunk some of the most overt cybersecurity misconceptions and exaggerations circulating today and provide accurate information. This empowers organizations to reinforce their infrastructure and connected assets and technologies

18 April 2025
Oma Martins-Okonkwo
Governance Article

Cybersecurity Governance in Digital Transformation

Digital transformation initiatives have become a major investment priority as organizations strive to leverage technology to reshape business models, drive efficiency and growth, and gain competitive advantage.

9 April 2025
Alex Mathew
Security Article

Will MFA Redefine Cyberdefense in the 21st Century?

MFA has the potential to revolutionize cyberdefense in the 21st century. There is value to be gained from delving into its benefits, limitations, and the possibilities it offers when integrated with emerging technologies.

17 March 2025
Fene Osakwe
Audit Article

Control Considerations for a Data Privacy Audit

There are 5 key risk areas that could provide guidance for auditors in today’s evolving privacy landscape. By identifying and defining these key risk areas, auditors can ensure robust and comprehensive privacy oversight

3 March 2025
Isla Sibanda
Audit Article

The Role of Digital Transformation Audits: Transform While Upholding Governance Standards

Digital transformation is reshaping the landscape of industries globally. While the benefits are enormous, these transformations can also jeopardize an organization’s governance standards if not executed with rigorous oversight.

3 March 2025
Gert Jan Koster
Security Article

Hybrid SAP IT Landscape: Security Challenges and Mitigations

Most organizations today have an IT environment that combines on-premises and cloud services. The preference to integrate these services has caught on widely, as it has proven flexible, scalable, and cost efficient.

27 February 2025
Safia Kazi
Privacy Article

The Evolving Role of the Privacy Professional

The privacy profession is evolving to include multiple components of ethics, and privacy professionals must incorporate ethics-related considerations into their daily work.

21 February 2025
Collin Beder
Emerging Technology Article

The Cost of Convenience: AI Adoption and Security Blind Spots

For the past few years, many believed that the race for artificial intelligence (AI) supremacy was firmly in the hands of established players such as OpenAI and Anthropic.

11 February 2025
Chester Avey
Security Article

What to Know About EXIF Data, a More Subtle Cybersecurity Risk

Understanding what vulnerabilities exist, along with their potential severity and impact, can dramatically strengthen an organization’s cybersecurity posture and improve overall cyberreadiness.

6 February 2025
Safia Kazi
Emerging Technology Article

The Tangled Web of Executive Orders on AI

The rapid shifts in the way the US executive branch addresses AI under different administrations illustrates why organizations are better positioned if they approach emerging technologies from risk-based and ethical perspectives.

4 February 2025
Chris Snyder
Security Article

Healthcare’s Growing Threat Landscape

In an era where technology is deeply embedded in every aspect of daily life, the healthcare industry is no exception—and cybercriminals have taken notice.

3 February 2025
Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US
Security Article

Guidelines for Operationalization of Web Client Runtime Security

This article includes seven suggested steps or activities that organizations may find useful in operationalizing their WCRS programs or capabilities.

31 January 2025
Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US
Security Article

Traditional Security Solutions Fall Short in Protecting Against Web Client Runtime Risk

This article describes the limitations of traditional security solutions in addressing WCRS risk and proposes implementation options for purpose-built security solutions.

30 January 2025
Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US
Security Article

An Introduction to Web Client Runtime Security

The term Web Client Runtime Security (WCRS) was coined by the authors to highlight the security or possible malicious behavior of the code executed in users' browsers during their web interactions.

29 January 2025
Yakir Golan
Risk Article

Cyberrisk Quantification: A Strategic Imperative for Financial Resilience

As enterprise risk becomes increasingly intricate, the strategic execution of addressing multifaceted threats has grown more critical than ever.

24 January 2025
Justin Rende
Security Article

Cybersecurity Trends to Watch in 2025

There is no crystal ball to forecast the future; however, organizations can make informed predictions about cybersecurity in the coming year.

6 January 2025
Ryan Standbridge
Security Article

Overreliance on Automated Tooling: A Big Cybersecurity Mistake

Automation and artificial intelligence (AI) have been a positive force multiplier in the cybersecurity industry. Improved time efficiency, resources, cost, and productivity are great strides in the field and should be celebrated.

30 December 2024
Amit Patel
Security Article

Humans Are IT Security’s Weakest Link

When thinking about what makes up IT security, high-tech firewalls, robust encryption algorithms, and advanced threat detection systems are often the first things that come to mind.

10 December 2024
Yuman Chau
Security Article

Ensuring Data Security: The Importance of Cloud Backups and Drill Testing

In the organizational IT environment, system and data backup is crucial. Data backup is the last defense against downtime if data is corrupted or lost.

2 December 2024
Abdul Qayyum Mohammed
Emerging Technology Article

Innovation Is Shaping the Future of Network Engineering

Quantum computing and blockchain bolster security measures, ensuring robust protection for sensitive data in cloud environments.

2 December 2024
Alex Mathew
Governance Article

Cloud Data Sovereignty: Governance and Risk Implications of Cross-Border Cloud Storage

Multinational organizations must navigate complex legal and regulatory challenges when adopting cross-border cloud services, which requires strategic planning and compliance measures to ensure successful implementation and mitigate potential risk.

18 November 2024
Arun Gupta
Emerging Technology Article

Revolutionizing CRM: How AI-Enhanced Security is Transforming Customer Data Protection

In customer relationship management (CRM), emerging AI technology is vital for enhancing security measures.

14 November 2024
Brian Odian
Emerging Technology Article

Embracing the Future: The Quantum Computing Revolution Begins Now

The ever-increasing, and impressive, capabilities of quantum computers could potentially break current encryption methods, necessitating advancements in cryptographic techniques to safeguard sensitive information.

7 November 2024
Chandra Sekhar Dash
Emerging Technology Article

The Importance of AI Safety in Customer Experience Automation

Organizations aim to empower stakeholders with generative capabilities that streamline workflows, transforming traditionally manual processes into automated efficiencies.

5 November 2024
Tori Anderson and Tracy Bordignon
Governance Article

Autopilot on Copilot: Governance Considerations and Pitfalls When Implementing Generative Artificial Intelligence

The adoption of generative artificial intelligence within enterprises has created an entirely new branch of governance and compliance risk.

1 November 2024
Adeleke Ayobami
Audit Article

How Blockchain Technology is Revolutionizing Audit and Control in Information Systems

In the realm of information systems, ensuring data integrity, security, and transparency are paramount.

31 October 2024
Innocent Atasie
Audit Article

Eight facility zones to consider while Auditing for Information, Physical, and Environmental Security Compliance

Access to critical facilities should be controlled and such controls should be reviewed regularly for suitability, adequacy, and effectiveness, whether these controls are preventive, corrective, deterrent, or detective in nature.

25 October 2024
Safia Kazi, AIGP, CIPT, and Collin Beder, CET, CSX-P, Security+
Emerging Technology Article

Safely and Responsibly Using Emerging Health Technology

To maximize the value and minimize the harms associated with emerging health technologies, it is critical to address ethical, privacy, and societal concerns to ensure that these technologies help rather than hurt humanity.

25 October 2025
Lalithkumar Prakashchand
Audit Article

Beyond the Blockchain Bubble: Distributed Ledger Technology for a Resilient Audit Landscape

The initial enthusiasm surrounding blockchain technology has subsided, paving the way for a more pragmatic exploration of its real-world applications.

23 October 2024
Chester Avey
Security Article

Comparing the MITRE ATT&CK and NIST Cybersecurity Frameworks

Naturally, this is much easier said than done, but by integrating these comprehensive and well-established cybersecurity frameworks, cyberprofessionals can craft their defense infrastructure to minimize risk.

17 October 2024
Gagan Koneru
Privacy Article

The Evolving World of Data Privacy: Trends and Strategies

To keep pace, organizations must familiarize themselves with crucial global privacy regulations and critical trends shaping the future of data protection.

14 October 2024
Isaac Lee
Audit Article

By The Importance of IS Audit: Lessons Learned from the Evergrande Crisis

The Evergrande Group scandal, wherein the company allegedly inflated its sales by US$79 billion despite audits by PwC, underscores the critical importance of robust IS audits.

11 October 2024
Patrick Barnett
Security Article

DarkAngels Strikes Big: Record-Breaking Ransom Secured

This payment is likely the largest known ransom payment to date. Of course, many organizations pay ransoms without disclosing the details to the public, making it difficult to determine if this is the largest payment ever made.

10 October 2024
Arun Gupta
Governance Article

The Crucial Integration of CRM and Corporate Governance: A Key to Better Business Outcomes

Organizations can achieve their strategic goals and retain a solid ethical basis by integrating corporate governance frameworks with customer relationship management (CRM) plans. This vital integration leads to better results and a brighter future.

7 October 2024
Olu Adekoya
Risk Article

Navigating Ransomware: Key Tactics for Enterprise Resilience

The increasing prevalence of ransomware attacks offers a unique learning opportunity. The experiences of diverse organizations across various sectors with a previous ransomware attack can provide practical lessons and invaluable insights for any enterprise to harness, empowering it to be better prepared and more resilient to ransomware attacks

1 October 2024
Gaya Ratham
Risk Article

Navigating Risk When Transitioning to the Cloud

Effective cyberrisk management in and of the cloud is important to safeguard sensitive data, maintain business continuity, and achieve regulatory compliance.

1 October 2024
Fene Osakwe
Audit Article

The Evolution of Tech Assurance: Restructuring the IT Audit Function

To ensure the smooth functioning of the IT department, it is essential to establish a well-structured IT audit department.

27 September 2024
Yuman Chau
Security Article

From Hollywood to Hacking: Understanding Deepfake Scams

Deepfake scams have become a pervasive threat in the digital age. They use artificial intelligence (AI) to create convincing yet entirely fabricated videos and audio recordings. Deepfake scams have the potential to damage reputations, spread false information, and even manipulate financial markets.

18 September 2024
Chris McGowan
Security Article

Centralized Services and Their Impact on Business Continuity

As organizations grow more reliant on major providers, business continuity and preventing, mitigating, and recovering from disruptions to resume operations become even more critical.

17 September 2024
Isla Sibanda
Emerging Technology Article

Reidentifying the Anonymized: Ethical Hacking Challenges in AI Data Training

The emergence of sophisticated AI methodologies capable of identifying individuals through intricate behavioral patterns amplifies these concerns and underscores the pressing need for robust privacy mechanisms and ethical frameworks in AI data training.

16 September 2024
Sunil Arora
Risk Article

Persuasive Technology: The Technology That Connects and Controls Us

Persuasive technology is any digital system that influences user behavior or attitudes. Various interactive platforms, including social media, health apps, ecommerce websites, and educational apps, fall under this term. Persuasive technology urges users toward a desired outcome, whether that outcome is purchasing a product, adopting a better lifestyle, or staying hooked on a particular app or service.

4 September 2024
Patrick Barnett
Risk Article

A New Threat Actor Group Emerges: Understanding Lapsus$

It is crucial to understand the activities of this specific threat group, given their repeated successes in breaching security measures. Organizations must thoroughly understand Lapsus$ to proactively safeguard their data, rather than merely reacting to breaches.

3 September 2024
Vaibhav Malik
Emerging Technology Article

Building a Secure and Compliant AI Infrastructure: Lessons from the Trenches

There are real-world security challenges that organizations face when deploying AI. Therefore, it is essential to devise and execute practical strategies that assist organizations in risk mitigation.

30 August 2024
Terry Ray
Governance Article

Auditors are Asking Better Questions—Organizations Should Have Better Answers

Security leaders agree that regulatory compliance is not an effective security strategy, yet the protection of data in most organizations is strictly limited to regulated data. Overcoming this paradox is necessary to build effective data security programs that both protect data and meet regulations.

27 August 2024
Arun Mamgai
Emerging Technology Article

AI Security Risk and Best Practices

Many organizations are still trying to determine their AI strategy, and the pipeline security and ethics of large language models (LLM) must be factored into this. As organizations increasingly integrate AI into their operations, it is crucial to understand that it is not a one-stop solution.

15 August 2024
Dorina Hamzo
Risk Article

Securing the Digital Landscape: Organizations Must Address Third-Party Risk Head-On

Third-party collaboration has evolved into a necessity for most organizations in today’s market. However, the challenges of managing a third-party risk program can be overwhelming.

13 August 2024
Varun Prasad
Emerging Technology Article

AI Algorithm Audits: Key Control Considerations

It is crucial to understand the inner workings of an AI system through these algorithmic audits that will provide us with insights into various aspects like training data, model development and training, and the underlying logic of AI systems. This information will enhance our confidence in the outputs of AI systems by verifying adherence to other principles of responsible AI.

2 August 2024
Patrick Barnett
Risk Article

Can Hardening Reduce Cyberrisk?

An often overlooked means to significantly reduce risk has been hardening systems, technologies, and network infrastructure.

19 July 2024
Yuman Chau
Audit Article

The Importance of Independent IT Audit

In the evolving digital landscape, enterprise IT departments are finding cybersecurity to be an indispensable shield, safeguarding innovation.

12 July 2024
Adeleke Ayobami
Emerging Technology Article

Leveraging AI for Information and Cybersecurity

In an era dominated by digital advancements, the importance of accessible information and resilient cybersecurity practices cannot be overstated.

28 June 2024
Prabin Litto
Security Article

Cloud Security Challenges in the Pharmaceutical Industry

Addressing the specific security concerns inherent in cloud computing within the pharmaceutical industry is pivotal for safeguarding sensitive data and ensuring regulatory compliance.

14 June 2024
Candice Jackson
Risk Article

Has the Digital Journey Added to the Risk of Using Third Parties?

In the swiftly advancing digital world, the role of third-party risk management (TPRM) has gained unprecedented importance.

7 June 2024
Patrick Barnett
Security Article

Understanding Sandworm, a State-Sponsored Threat Group

The Russian state-sponsored threat group Sandworm, operated by military cyberwarfare unit 74455, is one of the most formidable global cyberthreat collectives in recent memory.

31 May 2024
Felix Muckenfuß, CIPM, CIPP/E
Governance Article

Reinforcing IT Governance in the Face of Constant Threats

Today’s infosec teams often face new and complex challenges in an increasingly unpredictable digital environment. They are responsible for protecting an overwhelming amount of data across multiple systems.

21 May 2024
Ivan Mans
Security Article

SAP Security Maturity: A Crash Course

Every journey to establish SAP security should begin with IT personnel identifying control weaknesses by bringing all stakeholders—security, audit, and compliance teams—into the fold.

9 May 2024
Mathieu Gorge
Security Article

Navigating the Cyber Elephant in the Boardroom

The 5 Pillars of Security Framework offers a straightforward and business-friendly methodology for addressing cybersecurity challenges.

29 April 2024
Art Poghosyan
Audit Article

Managing Compliance in 2024: Best Practices to Secure Cloud Access and Stay Audit-Ready

Cloud engineering and security leaders can implement streamlined solutions to protect their online environments without compromising productivity—while still achieving compliance.

18 April 2024
Patrick Barnett
Security Article

Using a Functional Cybersecurity Exercise to Test Incident Response Plans

An FTX empowers enterprises to test their abilities and prepare their cyberrisk teams to defend against dreaded cyberattacks that occur far too often today.

8 April 2024
Isaac Kohen
Security Article

Five Steps to Secure an Enterprise Against Insider Threats

An organization’s employees are one of its most valuable assets and its most vulnerable cyberattack surface.

26 March 2024
Safia Kazi
Privacy Article

Optimize Enterprise Data and Uphold Privacy With ISACA’s DTEF

ISACA’s Digital Trust Ecosystem Framework (DTEF) can help enterprises ensure that broad organizational objectives and goals—including those relying on collecting and processing personal information—align with privacy objectives and compliance requirements.

14 March 2024
Industry News
Privacy Article

Achieving Ethical Protection of Data Privacy

Adherence to data privacy protection standards is of the utmost importance to cyberprofessionals. On today’s technology-driven, information-intensive landscape, the information security function is made more complicated due to new sources of sociotechnology risk.

12 March 2024
Aparna Agarwal
Security Article

The Top 5 Cybersecurity Threats and How to Defend Against Them

It is imperative to examine the top cyberthreats faced by enterprises today and consider what preventive measures can be taken to safeguard digital assets and privacy.

27 February 2024
Guy Propper
Security Article

Navigating the Shifting Ransomware Landscape

Over the years, ransomware attacks have increasingly grown more common, costly and consequential, making it critical that organizations understand the latest threats and implement solutions to keep their (and their customers’) data secure—and their operations thriving.

13 February 2024
Arun Mamgai
Security Article

How CISOs Can Take Advantage of the Balanced Scorecard Method

Enterprises require a balanced scorecard-based tool to proactively safeguard their assets from unforeseen threats.

2 February 2024
Mike Boutwell
Risk Article

Navigating the Treacherous Waters of IT Risk

The MOVEIt Transfer hacking campaign epitomizes the threats faced in an increasingly interconnected world.

30 January 2024
Jordan Kassing
Audit Article

Five Controls to Consider When Auditing a Vendor Management Program

Vendor management is a fundamentally critical function that impacts an organization's operational success, efficiency, reputation and risk exposure.

23 January 2024
Ozman Azab
Audit Article

Six Benefits of a Cybersecurity Audit (and 6 Steps to Perform One)

A cybersecurity audit empowers organizations of all sizes to help identify and mitigate their cybersecurity risk.

16 January 2023
Fouad Mulla
Security Article

Building Cybersecurity Resilience With the Power of Habit

In the digital age, cybersecurity is paramount for every organization, yet building a strong cybersecurity culture remains a challenge.

9 January 2024
Patrick Barnett
Security Article

Countermeasures to Protect Against TA505 (CL0P Ransomware)

TA505 has emerged as one of the most sophisticated and prolific threat groups of 2023. Organizations can protect themselves by implementing countermeasures intended to mitigate risk.

2 January 2024

Industry News Archived Articles By Year

Check Mark 2024
Check Mark 2023
Check Mark 2022
Check Mark 2021

Custom Training Programs

Looking to train your team? We can customize virtual training and certification programs for every need.

GET STARTED