ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Featured Blog

Three High Impact Identity Strategies for Security Leaders in the Age of AI

In May 2026, Charter Communications (one of the largest telecommunications and broadband providers in the United States) disclosed a major data breach in which attackers allegedly used voice phishing (vishing) techniques to compromise an employee’s Microsoft Entra account and exfiltrate approximately 40 million customer records.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1535 Results

Blog Post

Three High-Impact Identity Strategies for Security Leaders in the Age of AI

Moving to behavior-based identity authentication is an effective first step is to replacing traditional multi-factor authentication and mitigating identity-related cyber threats.

24 July 2026

Blog Post

Executable Compliance: Why Regulation Is Becoming Infrastructure

For many organizations, compliance still is not data-based, preventing them from achieving numerous benefits and a sustainable competitive advantage.

22 July 2026

Blog Post

When AI Joins the Party, Model Integrity Becomes Business Continuity

A lack of clarity about what models are running, how they are operating and how they can be addressed if something goes wrong presents major risk to organizations in the era of artificial intelligence.

21 July 2026

Mansoor Ahmad Khan, Fellow BCS, CISSP, CISM, GIAC Advisory Board

Blog Post

Modern Day CISO: Navigating from Technical Gatekeeper to Strategic Business Leader

The modern CISO has evolved from being a technical gatekeeper to a strategic business leader who bridges technical resilience with corporate strategy, navigating global regulations, quantifying cyber risks in financial terms and aligning AI and continuous compliance with business goals.

17 July 2026

Blog Post

Why I Took AAISM, and How I Prepared to Pass

Taking the AAISM exam could be the differentiator in your career at a time when understanding AI-specific threats and opportunities is a high priority for many organizations.

15 July 2026

Blog Post

When Intelligence Becomes a Controlled Capability

As frontier AI systems grow in capability, governments are viewing them as strategic assets that impact cybersecurity, intelligence, economic competitiveness and national security.

13 July 2026

Blog Post

The AI Intervention Layer: From AI Proof to Runtime Control

Effective artificial intelligence governance amid a complex threat landscape calls for decision-capable enforcement at runtime.

10 July 2026

Blog Post

The Browser Is the New Security Enforcement in Hybrid Work

The perimeter has evolved into a dynamic, user-defined construct, but there are key steps security practitioners can take to keep pace.

7 July 2026

Blog Post

Making AI-Powered Audits Understandable: A Practical Guide Using COBIT EDM05

While AI is rapidly transforming internal audits, promising faster insights and broader coverages than traditional audit approaches, many stakeholders don't fully understand how AI works or why they should trust it.

6 July 2026

Blog Post

Vulnerability Is Not a Bug: It’s a State of Being

The moment we treat vulnerability as a checklist item to close instead of a condition to continuously manage, we are asking for trouble.

2 July 2026

Blog Post

The CISO vs. Shadow AI Cold War

Organizations' biggest artificial intelligence risk may not be the model, but how shadow AI is being adopted across the enterprise.

1 July 2026

Blog Post

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

In an era of intensifying geopolitical competition, the sea is an often overlooked domain where matters of economic security, national resilience, technological advantage and state power overlap.

30 June 2026

Blog Post

Not Yet in the Boardroom, and Why That Is Exactly the Point

The value of voluntary work might lead to immediate rewards, but the cumulative effect of volunteering eventually becomes transformative.

29 June 2026

Blog Post

Recognizing Excellence and Encouraging Future Generations: 2027 ISACA Awards Nominations Now Open

Nominations for the 2027 ISACA Awards are open, providing the opportunity to recognize those who have made outstanding contributions to the ISACA professional community.

25 June 2026

Ts. Alan Yau, Director, Technology & Cybersecurity Leader, ALE Advisory, M.Sc., CISA, CISM, CGEIT, CRISC, CDPSE, AAISM, AAIA, AAIR

Blog Post

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

ISACA's Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM) and Advanced in AI Audit (AAIA) certifications provide three complementary perspectives that organizations need to adopt AI responsibly.

24 June 2026

ISACA Now By Year

ISACA Now Blog

Three High Impact Identity Strategies for Security Leaders in the Age of AI

ISACA Career Catalyst Member Stories

View Recent Posts

Layout

Filters

Subjects

Domain

Credentials

Three High-Impact Identity Strategies for Security Leaders in the Age of AI

Executable Compliance: Why Regulation Is Becoming Infrastructure

When AI Joins the Party, Model Integrity Becomes Business Continuity

Modern Day CISO: Navigating from Technical Gatekeeper to Strategic Business Leader

Why I Took AAISM, and How I Prepared to Pass

When Intelligence Becomes a Controlled Capability

The AI Intervention Layer: From AI Proof to Runtime Control

The Browser Is the New Security Enforcement in Hybrid Work

Making AI-Powered Audits Understandable: A Practical Guide Using COBIT EDM05

Vulnerability Is Not a Bug: It’s a State of Being

The CISO vs. Shadow AI Cold War

The Grey-Zone Threat to AI Sovereignty, Subsea Sabotage, Connectivity and National Security

Not Yet in the Boardroom, and Why That Is Exactly the Point

Recognizing Excellence and Encouraging Future Generations: 2027 ISACA Awards Nominations Now Open

How ISACA’s Advanced AI Credentials Support the Three Pillars of Responsible AI: Risk, Security and Assurance

CMMI AIM Provides Path for Responsible AI Integration

Ten Bonus Questions with Theresa Payton

When AI Joins the Party, Vulnerability Backlogs Become Fiction

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The Unwitting Accomplice Behind the Modern Insider Threat

CMMC as a Business Design Decision, Part 3: Measure What Leadership Cares About

Unlocking Security: How a Routine Audit Transformed Secrets Management at a Multinational Conglomerate

The Audit Evidence Crisis: How AI Deepfakes Are Rewriting Assurance Standards

Cyber Readiness as Competitive Advantage in the AI Era

Blockchain Auditing in Practice: What Executives Need to Understand Now

AI’s Impact on ISACA Certification Pay Premiums: Demand Growing for Governance, Audit and Risk Expertise

Managing Malevolent AI Agents

The Strategic ROI of Privacy-Enhancing Technologies (PETs) in the AI Era

Cloud Security Posture Management: The Control Plane for Modern Cloud Risk

Future to Bring New Tasks, Same Purpose for ISACA Members

When Cybersecurity Met Soccer: The World’s Most Beautiful Game Meets the World’s Most Complex Digital Challenges

Five Questions Leaders Should Answer Before Piloting Advanced AI or Quantum-Enabled Systems

Remembering Founding ISACA Member Eugene Frank

Preparing for a Quantum Future: Navigating Accelerated Timelines for Secure Encryption

CMMC as a Business Design Decision, Part 2: Lock Your Architecture and Govern the Build

Taking the Myth out of Claude Mythos

When AI Joins the Party, Credentials Become the Weapon: Fix Access Without Slowing Delivery

Pillars For Vetting Vendors for a Sturdier Supply Chain

The AI Security Gap: Adoption Is Accelerating, but Response Capability Is Lagging

Vanishing Boundaries: Leading Member Innovation in a World of AI, Cyber and Vibe Coding

AI Assurance vs. AI Governance

A Proven Seven-Step Process to Accelerate Cybersecurity Transformation

RSA 2026: The Agent Revolution Is Already Here

CMMC as a Business Design Decision, Part 1: Decide What Work You Want

Leadership in Risk: The Strategic Advantage of Adding AAIR to Your Credentials

Security Debt Is Eating Your Organization Alive

Volunteer Appreciation Week: ISACA Volunteers Share Journeys and Advice

The Security Metrics That Lie

Meet ISACA's 2026 Global Achievement Award Winners

ISACA’s Critical Work of Growing Capacity Across CMMC Ecosystem

The Future of Software Delivery: Why "Shift-Left" Security is Your Competitive Advantage

AI Risk in Practice: How Structured Capability Changes Outcomes

When AI Joins the Party, Five Lines Beat Fifty Slides

Agentic AI Evolution and the Security Claw

The New Battleground for ICS/OT: Why AI-Driven Defense is Becoming Essential for ICS/OT Cybersecurity

Who AAIR is for, and When It’s the Right Credential

Five Signs your Organization is Underestimating AI Risk at Senior Levels

When Transitioning off the Board, Choose the Graceful Path

Understanding the Ethical Impacts of AI Systems

Combining Risk Management with the Sales Process for Greater Success

Does Claude Have a Security Problem?

How Basic Principles of Access and Identity Can Prevent Major Security Crises

Setting the Baseline for Secure Software: Why the Code of Practice Matters

AI Pulse Poll Reveals Rampant Uncertainty on Enterprise Landscape

Beyond the Frame: Strengthening the Future of Technology Through the SheLeadsTech Chicago–WECode Harvard University Partnership

Securing the AI Frontier: A Practical Framework for Assessing AI Coding Assistant Vulnerabilities

The CISO’s Dilemma: When Your Employees’ Thoughts Become Attack Vectors

When AI Joins the Party, Assurance Checks the Receipts Before the Board Gets the Bill

What Failing the AAIA Taught Me About Resilience, Learning and Our Shared Journey

Four Emerging AI Risk Areas for Digital Trust Professionals in 2026

Why CISA and CGEIT Are Outperforming the Certification Market in 2026