ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Nandita Rao Narla, Head of Technical Privacy and Governance at DoorDash

Featured Blog

Five Practical Strategies to Address Privacy Engineering Challenges

Privacy engineering is often called “building privacy in,” but in practice, it is far more complex and involves dealing with rapidly evolving technology, unclear laws and shifting user expectations. The role of a privacy engineer also varies across organizations, shaping when privacy is incorporated into products and how controls are implemented.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1462 Results

Blog Post

Five Practical Strategies to Address Privacy Engineering Challenges

Organizations can turn privacy into a core capability by elevating privacy engineering into a distinct practice with consistent, proactive focus.

18 February 2026

Blog Post

The EU AI Act is Here: Why Tech Leaders Should Stop Waiting and Seeing

Translating the legal jargon of the EU AI Act into a productive roadmap for your organization is achievable, beginning with conducting a gap analysis.

16 February 2026

Carol Lee, CISM, CRISC, CDPSE, C|CISO, CCSP, CEH, CIPM, CSSLP; Terence Law, CISA, CFA, CISSP, CPA, Certified Banker; Karen Liang, OSEP, OSCP, CISA;

Blog Post

Navigating Global AI Governance: Privacy Implications in EU and China Frameworks

By understanding and integrating global AI governance approaches, organizations can ensure compliance and contribute to the responsible and ethical advancement of AI, leading to sustainable innovation in our digital ecosystem.

13 February 2026

Blog Post

The Reckoning of Silence: Medical Device Cybersecurity in a Transparent Age

As the cybersecurity landscape evolves, so must our conversations around medical device security and vulnerability disclosures.

11 February 2026

Blog Post

Leading from the Heart: Servant Leadership Attributes for ISACA Chapter Leaders

By making chapter members and volunteers feel heard and uplifted, ISACA chapter leaders can make a huge difference in growing their local ISACA communities and equipping their members for success.

9 February 2026

Blog Post

Critical Skills for Veterans in 2026: From Service to Security

Service leaders and veterans develop the critical thinking skills that will be increasingly important on the security landscape in this era of widespread artificial intelligence.

6 February 2026

Blog Post

How Decentralized Audit Architectures Reinvent Assurance for a Distributed Future

Decentralized audit architectures provide a useful reset for how modern assurance practitioners can be more impactful within a distributed, platform-driven, enterprise ecosystem.

3 February 2026

Blog Post

Preparing IT Auditors for the Next Wave of Digital Risk: AI, IoT & Privacy

Gaining expertise and skills in privacy, the Internet of Things and artificial intelligence will be a necessity for IT auditors as the digital risk landscape becomes a major challenge in the profession.

2 February 2026

Blog Post

Three Proven Ways to Boost Security in Amazon Web Services

The digital era has prompted leaders to migrate business-critical systems to the cloud, which offers undeniable benefits in terms of agility, flexibility, and innovation, but also carries substantial risks.

29 January 2026

Blog Post

How to Operationalize Data Sovereignty in Your GenAI Deployments

Data sovereignty in the GenAI era calls for adapting existing governance systems to adjust to a technology that is blurring traditional boundaries.

28 January 2026

Blog Post

Can Artificial Intelligence Replace Software Engineers and Cybersecurity Professionals?

While artificial intelligence is becoming increasingly useful in cybersecurity and software engineering, humans will remain essential for effective and responsible implementations.

26 January 2026

Blog Post

Detect, Prevent, Comply: The Three Pillars of Modern DLP Use Cases

Detect, prevent, and comply are now inseparable foundations of modern data protection, and a data‑centric DLP strategy that addresses both internal and external threats is the path to resilience and trust.

23 January 2026

Blog Post

Is AI ‘Serving’ Humankind?

Minimizing unintended negative consequences of artificial intelligence is a critical imperative, but it might prove very difficult to achieve in practice.

21 January 2026

Ankit Gupta, CISA, CISM, CRISC, AAISM, Senior Security Engineer, and Shilpi Mittal, CISA, CISM, CRISC

Blog Post

Post Quantum Cryptography: A 12 Month Playbook for Digital Trust Professionals

A well-organized, quarter-by-quarter planning approach can enable digital trust professionals to be well-prepared for the post-quantum cryptography landscape to come.

20 January 2026

Blog Post

Five Key Findings from ISACA State of Privacy 2026 Report

Smaller privacy teams and challenges in keeping up with the regulatory environment are among the notable trends discovered in ISACA's State of Privacy 2026 report.

15 January 2026