Articles Industry News 2025

Bhavya Jain

Emerging Technology Article

Collaboration and the New Triad of AI Governance

The traditional boundaries between privacy, cybersecurity, and legal functions must give way to integrated governance if organizations are to meet emerging regulatory expectations, reduce systemic risk, and preserve trust in a future increasingly shaped by artificially-derived decisions.

19 September 2025

Collin Beder

Emerging Technology Article

A New Era of App Development

Vibe coding refers to the practice of developing software applications through the use of natural language instructions with the assistance of generative artificial intelligence (gen AI) systems and agentic AI.

17 September 2025

Rashmi Tallapragada

Security Article

Beyond NIST: Why Compliance Standards Fall Short in the PCN World

For most organizations, aligning with the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) feels like a logical choice.

11 September 2025

Nirupam Samanta

Emerging Technology Article

The Growing Challenge of Auditing Agentic AI

Agentic AI presents a growing challenge for audit and governance functions, primarily because its decision-making processes often lack clear traceability.

2 September 2025

Michael Podemski

The Future of IT Audit: Embracing Agile and Continuous Learning

Today's IT auditors are agile, curious, and committed to continuous learning, ensuring that they remain effective and relevant in the face of new challenges.

Aparna Achanta

Emerging Technology Article

The New Oil, the New Risk: Data Security in the Era of AI, Cloud, and IoT

Securing data is a highly challenging task and is quickly becoming a top priority for organizations as emerging technologies continue to advance and shape the way data is handled.

Isla Sibanda

Emerging Technology Article

Combating the Threat of Adversarial Machine Learning to AI-Driven Cybersecurity

Due to their vast potential, these tools and their implementation have become the top focus for AI spending in most tech budgets. However, as these technologies become more sophisticated, they also present new vulnerabilities.

Safia Kazi

Emerging Technology Article

Moving Beyond the AI Hype

The developers of AI products and business leaders may not be asking the important questions—or worse, they are disregarding the troubling answers to these questions...

Justin Rende

Emerging Technology Article

Organizations Need More Than Book Smart AI

AI excels at processing information but lacks emotional intelligence. Without this, it cannot form human connections or successfully lead within an organization

Collin Beder

Emerging Technology Article

The Reality of AI: Oversold and Underdelivered

Artificial intelligence (AI), especially generative AI, has been dominating headlines and enterprise conversations in recent years.

Anirudh Murali

Emerging Technology Article

Safeguarding the Enterprise AI Evolution: Best Practices for Agentic AI Workflows

Agentic AI represents a breakthrough in technological innovation, but the capabilities of AI agents remain somewhat mysterious and warrant further exploration of their essential components. Organizations must understand this new technology and implement proactive security practices to harness agentic AI, a significant force multiplier in recent times.

Syed Salman

Security Article

Enhancing Security Awareness to Uplift Security Culture

Enterprises are becoming increasingly aware of advanced phishing and social engineering attacks, recognizing that a strong cybersecurity awareness culture is essential for defending against these sophisticated threats.

Chester Avey

Security Article

Mastering IoT Defense Strategies With Cybersecurity Education

As innovative technologies such as artificial intelligence (AI) and big data analytics evolve and as supply chains become more convoluted and intertwined, the attack surface of organizations deploying a wealth of IoT devices expands significantly.

Anuj Choudhary

Security Article

Trapped Virtually: Understanding Digital Arrest Scams

As cyberscams grow increasingly complex and difficult to detect, it is imperative that cybersecurity professionals not only recognize the severity of these scams but also take proactive measures to fortify both personal and organizational defenses.

Bhavya Jain

Security Article

Cyberwargaming in 2025: Why Enterprises Cannot Afford to Skip It

Cybercriminals are constantly refining their tactics, and many organizations fail to keep pace with newly evolved threats due to inadequate security training and obsolete IR plans.

Chelson Chong, and Meng Fai Chan, CISA, CDPSE, CISSP, GRID

Harnessing GenAI to Improve Audit Work Efficiency Through Proper Planning

GenAI has the potential to improve the audit function’s efficiency and effectiveness. However, the use of GenAI does not come without risk, and organizations should be aware of that risk when implementing GenAI. It is of the utmost importance to identify and mitigate risk before implementing GenAI or any emerging technology.

VJ Srinivas

Vendor Risk Assessments: Do Organizations Still Need Them?

While it is acceptable and commonplace to have work completed by another vendor based on mutually agreed contracts, the overall management of related risk is a pertinent point of attention.

Shamnad Shaffi

Security Article

The Zero-ETL Paradigm: Transforming Enterprise Data Integration in Real Time

Zero-ETL offers direct data movement capabilities and advanced cloud technologies and allows for the leveraging of modern architectural patterns to enable real-time data access while significantly reducing operational complexity and costs.

Nivathan Somasundharam

Security Article

Protecting Kubernetes Clusters and Workloads at Scale

As organizations increasingly adopt Kubernetes for its scalability and flexibility, it is imperative to prioritize the security of both Kubernetes clusters and workloads.

Collin Beder

Security Article

Post-Quantum Cryptography: A Call to Action

While the world has been laser-focused on artificial intelligence (AI), major advancements are occurring in quantum computing.

Guy Pearce

Governance Article

Strategic CIO Responses to Today’s Leadership Trends

The strategic chief information officer (CIO) must keep an eye not only on the evolving technology landscape, but also on evolving leadership and governance trends and their inevitable dilemmas, as these factors shape IT strategy and influence the way IT productively enables enterprise value creation.

Chester Avey

Security Article

Debunking Cybersecurity Myths in 2025

ITis prudent to examine and debunk some of the most overt cybersecurity misconceptions and exaggerations circulating today and provide accurate information. This empowers organizations to reinforce their infrastructure and connected assets and technologies

Oma Martins-Okonkwo

Governance Article

Cybersecurity Governance in Digital Transformation

Digital transformation initiatives have become a major investment priority as organizations strive to leverage technology to reshape business models, drive efficiency and growth, and gain competitive advantage.

Alex Mathew

Security Article

Will MFA Redefine Cyberdefense in the 21st Century?

MFA has the potential to revolutionize cyberdefense in the 21st century. There is value to be gained from delving into its benefits, limitations, and the possibilities it offers when integrated with emerging technologies.

Fene Osakwe

Control Considerations for a Data Privacy Audit

There are 5 key risk areas that could provide guidance for auditors in today’s evolving privacy landscape. By identifying and defining these key risk areas, auditors can ensure robust and comprehensive privacy oversight

Isla Sibanda

The Role of Digital Transformation Audits: Transform While Upholding Governance Standards

Digital transformation is reshaping the landscape of industries globally. While the benefits are enormous, these transformations can also jeopardize an organization’s governance standards if not executed with rigorous oversight.

Gert Jan Koster

Security Article

Hybrid SAP IT Landscape: Security Challenges and Mitigations

Most organizations today have an IT environment that combines on-premises and cloud services. The preference to integrate these services has caught on widely, as it has proven flexible, scalable, and cost efficient.

27 February 2025

Safia Kazi

Privacy Article

The Evolving Role of the Privacy Professional

The privacy profession is evolving to include multiple components of ethics, and privacy professionals must incorporate ethics-related considerations into their daily work.

21 February 2025

Collin Beder

Emerging Technology Article

The Cost of Convenience: AI Adoption and Security Blind Spots

For the past few years, many believed that the race for artificial intelligence (AI) supremacy was firmly in the hands of established players such as OpenAI and Anthropic.

11 February 2025

Chester Avey

Security Article

What to Know About EXIF Data, a More Subtle Cybersecurity Risk

Understanding what vulnerabilities exist, along with their potential severity and impact, can dramatically strengthen an organization’s cybersecurity posture and improve overall cyberreadiness.

6 February 2025

Safia Kazi

Emerging Technology Article

The Tangled Web of Executive Orders on AI

The rapid shifts in the way the US executive branch addresses AI under different administrations illustrates why organizations are better positioned if they approach emerging technologies from risk-based and ethical perspectives.

4 February 2025

Chris Snyder

Security Article

Healthcare’s Growing Threat Landscape

In an era where technology is deeply embedded in every aspect of daily life, the healthcare industry is no exception—and cybercriminals have taken notice.

3 February 2025

Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US

Security Article

Guidelines for Operationalization of Web Client Runtime Security

This article includes seven suggested steps or activities that organizations may find useful in operationalizing their WCRS programs or capabilities.

31 January 2025

Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US

Security Article

Traditional Security Solutions Fall Short in Protecting Against Web Client Runtime Risk

This article describes the limitations of traditional security solutions in addressing WCRS risk and proposes implementation options for purpose-built security solutions.

30 January 2025

Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US

Security Article

An Introduction to Web Client Runtime Security

The term Web Client Runtime Security (WCRS) was coined by the authors to highlight the security or possible malicious behavior of the code executed in users' browsers during their web interactions.

29 January 2025

Yakir Golan

Cyberrisk Quantification: A Strategic Imperative for Financial Resilience

As enterprise risk becomes increasingly intricate, the strategic execution of addressing multifaceted threats has grown more critical than ever.

24 January 2025

Justin Rende

Security Article

Cybersecurity Trends to Watch in 2025

There is no crystal ball to forecast the future; however, organizations can make informed predictions about cybersecurity in the coming year.