ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Featured Blog

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

Hidden under the oceans and absent from our thoughts, subsea cables have been viewed as an invisible part of our global telecommunications ecosystem. These fiber-optic arteries quietly carried the data flows that silently enable globalization, digital transformation, financial markets, cloud computing and the AI revolution. Today, most major AI ecosystems (let alone global supply chains) rely on them and every sovereign AI strategy will depend upon them in some way.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1526 Results

Blog Post

Vulnerability Is Not a Bug: It’s a State of Being

The moment we treat vulnerability as a checklist item to close instead of a condition to continuously manage, we are asking for trouble.

2 July 2026

Blog Post

The CISO vs. Shadow AI Cold War

Organizations' biggest artificial intelligence risk may not be the model, but how shadow AI is being adopted across the enterprise.

1 July 2026

Blog Post

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

In an era of intensifying geopolitical competition, the sea is an often overlooked domain where matters of economic security, national resilience, technological advantage and state power overlap.

30 June 2026

Blog Post

Not Yet in the Boardroom, and Why That Is Exactly the Point

The value of voluntary work might lead to immediate rewards, but the cumulative effect of volunteering eventually becomes transformative.

29 June 2026

Blog Post

Recognizing Excellence and Encouraging Future Generations: 2027 ISACA Awards Nominations Now Open

Nominations for the 2027 ISACA Awards are open, providing the opportunity to recognize those who have made outstanding contributions to the ISACA professional community.

25 June 2026

Ts. Alan Yau, Director, Technology & Cybersecurity Leader, ALE Advisory, M.Sc., CISA, CISM, CGEIT, CRISC, CDPSE, AAISM, AAIA, AAIR

Blog Post

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

ISACA's Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM) and Advanced in AI Audit (AAIA) certifications provide three complementary perspectives that organizations need to adopt AI responsibly.

24 June 2026

Blog Post

CMMI AIM Provides Path for Responsible AI Integration

The new CMMI Artificial Intelligence Maturity (CMMI AIM) model provides a structured path for organizations to integrate AI responsibly and effectively.

23 June 2026

Blog Post

Ten Bonus Questions with Theresa Payton

ISACA Conference North America keynote speaker Theresa Payton shares her perspective around cybersecurity and AI metrics, upskilling employees, preparing for quantum computing threats, and more.

22 June 2026

Blog Post

When AI Joins the Party, Vulnerability Backlogs Become Fiction

A clean vulnerability backlog is not necessarily a sign that an organization is well prepared to thwart cyber attackers.

18 June 2026

Blog Post

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The attack surface within an enterprise has increased in a manner that most governance frameworks did not envision. With organizations moving to deploy neurotechnology at scale, they are creating a type of data that their current classification schemas were not designed to deal with.

17 June 2026

Blog Post

The Unwitting Accomplice Behind the Modern Insider Threat

Artificial intelligence agents, copilots, orchestration frameworks, autonomous workflows, machine identities, and more operate with trusted access across enterprise environments, resetting the insider threat landscape.

16 June 2026

Blog Post

CMMC as a Business Design Decision, Part 3: Measure What Leadership Cares About

Explore key metrics that help to connect CMMC to business outcomes that resonate with boards of directors and executive leadership.

11 June 2026

Blog Post

Unlocking Security: How a Routine Audit Transformed Secrets Management at a Multinational Conglomerate

A routine audit revealing hardcoded API keys in a multinational conglomerate's CI/CD pipeline set in motion a recalibration of their secrets management, underscoring the importance of addressing blind spots for increased security, efficiency and agility.

10 June 2026

Blog Post

The Audit Evidence Crisis: How AI Deepfakes Are Rewriting Assurance Standards

With AI creating flawless deepfakes, auditors can no longer afford to start with trust; auditors must begin with zero trust, verify relentlessly, and only then decide what can be trusted.

8 June 2026