Home / Resources / News and Trends / Industry News / 2025

Domain:

More Filters
Card List
Nirupam Samanta
Emerging Technology Article

The Growing Challenge of Auditing Agentic AI

Agentic AI presents a growing challenge for audit and governance functions, primarily because its decision-making processes often lack clear traceability.

2 September 2025
Michael Podemski
Audit Article

The Future of IT Audit: Embracing Agile and Continuous Learning

Today's IT auditors are agile, curious, and committed to continuous learning, ensuring that they remain effective and relevant in the face of new challenges.

27 August 2025
Aparna Achanta
Emerging Technology Article

The New Oil, the New Risk: Data Security in the Era of AI, Cloud, and IoT

Securing data is a highly challenging task and is quickly becoming a top priority for organizations as emerging technologies continue to advance and shape the way data is handled.

7 August 2025
Isla Sibanda
Emerging Technology Article

Combating the Threat of Adversarial Machine Learning to AI-Driven Cybersecurity

Due to their vast potential, these tools and their implementation have become the top focus for AI spending in most tech budgets. However, as these technologies become more sophisticated, they also present new vulnerabilities.

5 August 2025
Safia Kazi
Emerging Technology Article

Moving Beyond the AI Hype

The developers of AI products and business leaders may not be asking the important questions—or worse, they are disregarding the troubling answers to these questions...

31 July 2025
Justin Rende
Emerging Technology Article

Organizations Need More Than Book Smart AI

AI excels at processing information but lacks emotional intelligence. Without this, it cannot form human connections or successfully lead within an organization

10 July 2025
Collin Beder
Emerging Technology Article

The Reality of AI: Oversold and Underdelivered

Artificial intelligence (AI), especially generative AI, has been dominating headlines and enterprise conversations in recent years.

3 July 2025
Anirudh Murali
Emerging Technology Article

Safeguarding the Enterprise AI Evolution: Best Practices for Agentic AI Workflows

Agentic AI represents a breakthrough in technological innovation, but the capabilities of AI agents remain somewhat mysterious and warrant further exploration of their essential components. Organizations must understand this new technology and implement proactive security practices to harness agentic AI, a significant force multiplier in recent times.

1 July 2025
Syed Salman
Security Article

Enhancing Security Awareness to Uplift Security Culture

Enterprises are becoming increasingly aware of advanced phishing and social engineering attacks, recognizing that a strong cybersecurity awareness culture is essential for defending against these sophisticated threats.

30 June 2025
Chester Avey
Security Article

Mastering IoT Defense Strategies With Cybersecurity Education

As innovative technologies such as artificial intelligence (AI) and big data analytics evolve and as supply chains become more convoluted and intertwined, the attack surface of organizations deploying a wealth of IoT devices expands significantly.

23 June 2025
Anuj Choudhary
Security Article

Trapped Virtually: Understanding Digital Arrest Scams

As cyberscams grow increasingly complex and difficult to detect, it is imperative that cybersecurity professionals not only recognize the severity of these scams but also take proactive measures to fortify both personal and organizational defenses.

20 June 2025
Bhavya Jain
Security Article

Cyberwargaming in 2025: Why Enterprises Cannot Afford to Skip It

Cybercriminals are constantly refining their tactics, and many organizations fail to keep pace with newly evolved threats due to inadequate security training and obsolete IR plans.

11 June 2025
Chelson Chong, and Meng Fai Chan, CISA, CDPSE, CISSP, GRID
Audit Article

Harnessing GenAI to Improve Audit Work Efficiency Through Proper Planning

GenAI has the potential to improve the audit function’s efficiency and effectiveness. However, the use of GenAI does not come without risk, and organizations should be aware of that risk when implementing GenAI. It is of the utmost importance to identify and mitigate risk before implementing GenAI or any emerging technology.

20 May 2025
VJ Srinivas
Risk Article

Vendor Risk Assessments: Do Organizations Still Need Them?

While it is acceptable and commonplace to have work completed by another vendor based on mutually agreed contracts, the overall management of related risk is a pertinent point of attention.

12 May 2025
Shamnad Shaffi
Security Article

The Zero-ETL Paradigm: Transforming Enterprise Data Integration in Real Time

Zero-ETL offers direct data movement capabilities and advanced cloud technologies and allows for the leveraging of modern architectural patterns to enable real-time data access while significantly reducing operational complexity and costs.

8 May 2025
Nivathan Somasundharam
Security Article

Protecting Kubernetes Clusters and Workloads at Scale

As organizations increasingly adopt Kubernetes for its scalability and flexibility, it is imperative to prioritize the security of both Kubernetes clusters and workloads.

1 May 2025
Collin Beder
Security Article

Post-Quantum Cryptography: A Call to Action

While the world has been laser-focused on artificial intelligence (AI), major advancements are occurring in quantum computing.

28 April 2025
Guy Pearce
Governance Article

Strategic CIO Responses to Today’s Leadership Trends

The strategic chief information officer (CIO) must keep an eye not only on the evolving technology landscape, but also on evolving leadership and governance trends and their inevitable dilemmas, as these factors shape IT strategy and influence the way IT productively enables enterprise value creation.

25 April 2025
Chester Avey
Security Article

Debunking Cybersecurity Myths in 2025

ITis prudent to examine and debunk some of the most overt cybersecurity misconceptions and exaggerations circulating today and provide accurate information. This empowers organizations to reinforce their infrastructure and connected assets and technologies

18 April 2025
Oma Martins-Okonkwo
Governance Article

Cybersecurity Governance in Digital Transformation

Digital transformation initiatives have become a major investment priority as organizations strive to leverage technology to reshape business models, drive efficiency and growth, and gain competitive advantage.

9 April 2025
Alex Mathew
Security Article

Will MFA Redefine Cyberdefense in the 21st Century?

MFA has the potential to revolutionize cyberdefense in the 21st century. There is value to be gained from delving into its benefits, limitations, and the possibilities it offers when integrated with emerging technologies.

17 March 2025
Fene Osakwe
Audit Article

Control Considerations for a Data Privacy Audit

There are 5 key risk areas that could provide guidance for auditors in today’s evolving privacy landscape. By identifying and defining these key risk areas, auditors can ensure robust and comprehensive privacy oversight

3 March 2025
Isla Sibanda
Audit Article

The Role of Digital Transformation Audits: Transform While Upholding Governance Standards

Digital transformation is reshaping the landscape of industries globally. While the benefits are enormous, these transformations can also jeopardize an organization’s governance standards if not executed with rigorous oversight.

3 March 2025
Gert Jan Koster
Security Article

Hybrid SAP IT Landscape: Security Challenges and Mitigations

Most organizations today have an IT environment that combines on-premises and cloud services. The preference to integrate these services has caught on widely, as it has proven flexible, scalable, and cost efficient.

27 February 2025
Safia Kazi
Privacy Article

The Evolving Role of the Privacy Professional

The privacy profession is evolving to include multiple components of ethics, and privacy professionals must incorporate ethics-related considerations into their daily work.

21 February 2025
Collin Beder
Emerging Technology Article

The Cost of Convenience: AI Adoption and Security Blind Spots

For the past few years, many believed that the race for artificial intelligence (AI) supremacy was firmly in the hands of established players such as OpenAI and Anthropic.

11 February 2025
Chester Avey
Security Article

What to Know About EXIF Data, a More Subtle Cybersecurity Risk

Understanding what vulnerabilities exist, along with their potential severity and impact, can dramatically strengthen an organization’s cybersecurity posture and improve overall cyberreadiness.

6 February 2025
Safia Kazi
Emerging Technology Article

The Tangled Web of Executive Orders on AI

The rapid shifts in the way the US executive branch addresses AI under different administrations illustrates why organizations are better positioned if they approach emerging technologies from risk-based and ethical perspectives.

4 February 2025
Chris Snyder
Security Article

Healthcare’s Growing Threat Landscape

In an era where technology is deeply embedded in every aspect of daily life, the healthcare industry is no exception—and cybercriminals have taken notice.

3 February 2025
Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US
Security Article

Guidelines for Operationalization of Web Client Runtime Security

This article includes seven suggested steps or activities that organizations may find useful in operationalizing their WCRS programs or capabilities.

31 January 2025
Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US
Security Article

Traditional Security Solutions Fall Short in Protecting Against Web Client Runtime Risk

This article describes the limitations of traditional security solutions in addressing WCRS risk and proposes implementation options for purpose-built security solutions.

30 January 2025
Sergei Vasilevsky, CISSP, and Kamal Govindaswamy, CCSP, CISSP, CIPP/US
Security Article

An Introduction to Web Client Runtime Security

The term Web Client Runtime Security (WCRS) was coined by the authors to highlight the security or possible malicious behavior of the code executed in users' browsers during their web interactions.

29 January 2025
Yakir Golan
Risk Article

Cyberrisk Quantification: A Strategic Imperative for Financial Resilience

As enterprise risk becomes increasingly intricate, the strategic execution of addressing multifaceted threats has grown more critical than ever.

24 January 2025
Justin Rende
Security Article

Cybersecurity Trends to Watch in 2025

There is no crystal ball to forecast the future; however, organizations can make informed predictions about cybersecurity in the coming year.

6 January 2025