Domain:

More Filters
Card List
Mohamed Isa Hammad
Blog Post

ISACA Innovative Solutions Award Winner Emphasizes Human-Centric Security

Mohamed Isa Hammad was recognized this year with the ISACA Innovation Solutions Award for spearheading initiatives that reduced fraud cases and breaches.

26 September 2025
Hakan Kantas
Blog Post

ISACA Career Catalyst Stories: Hakan Kantas, Managing Partner & Principal Consultant

Hakan has been an ISACA member for 15 years, and is one of the earliest members in Istanbul, Turkey. Learn more about his journey with ISACA.

25 September 2025
Richard Beck
Blog Post

The Rise of the Agentic AI Defender

Agentic AI can serve as a powerful tool for security teams, enabling them to transition from a reactive to proactive security posture.

24 September 2025
ShanShan Pa
Blog Post

The Shared Responsibility Model for Responsible AI

The AI Shared Responsibility Model is foundational for organizations working toward implementation of responsible AI systems.

23 September 2025
Andre Porsch
Blog Post

Three Penetrating Leadership Questions to Create a Cyber Resilient Culture

Posing these three straightforward questions to executives is the best way to work toward building the cyber-resilient culture that all organizations need.

19 September 2025
John Pouey
Blog Post

Why AAISM is the Next Step for CISMs

ISACA's new Advanced in AI Security Management (AAISM) credential is a natural next step to layer AI expertise for those who hold the CISM credential.

17 September 2025
Maman Ibrahim
Blog Post

Unseen, Unchecked, Unraveling: Inside the Risky Code of Self-Modifying AI

When it comes to autonomous and self-modifying AI, organizations should invest in tailored audit frameworks or risk facing unpredictable and potentially disastrous outcomes.

16 September 2026
Julie Chatman
Blog Post

Is Your Cybersecurity Team the ‘Department of No’? What Smart Business Leaders Do When Cybersecurity Blocks Progress

Friction between the cybersecurity team and the business can keep organizations from innovating the way they need to, but key mindset shifts can reposition cybersecurity as a partner instead of an obstacle.

15 September 2025
Dhaval Deepak Joshi, CISA, CDPSE
Blog Post

Leading with Integrity: Why Courageous Governance is the New Competitive Edge

At a time in which technology outpaces our capacity to have all the needed guardrails in place, effective governance goes beyond merely following rules and checklists.

12 September 2025
Beyond the Checklist: Embedding Ethical AI Principles in Your Third-Party Compliance Assessments
Blog Post

Beyond the Checklist: Embedding Ethical AI Principles in Your Third-Party Compliance Assessments

As artificial intelligence increasingly is embedded into companies' products and services, ethical implementations must be treated as a foundational requirement.

11 September 2025
Omotayo F. Salako
Blog Post

When Cyber Meets Physical: Practical Paths for Digital Trust Professionals

Omotayo F. Salako shares practical ways digital trust professionals can embrace and safeguard the powerful convergence of cyber-physical systems.

11 September 2025
Graduation cap graphic illustrating the milestone of completing an academic program.
Blog Post

The Transition from IT Risk Management to Academia

Khadiza Laskor shares the journey of leaving a nearly 20-year career in IT audit, compliance, and risk management to pursue a PhD in cybersecurity.

8 September 2025
AI Reshaping Risk and Governance: Top Takeaways from GRC Conference 2025
Blog Post

AI Reshaping Risk and Governance: Top Takeaways from GRC Conference 2025

The recent GRC conference, from ISACA and The IIA, focused on how emerging technologies are changing responsibilities for GRC professionals and how practitioners can take action to continue to excel.

5 September 2025
Rajiv Dewan
Blog Post

Non-Human Identities: The Next Big Challenge for Organizations

Maintaining an inventory of all machine identities and assigning ownership for all non-human identities are among the key steps that can improve organizations' identity management.

3 September 2025
Marcel Rieger
Blog Post

Is Artificial Intelligence Rewriting Our Perception of Truth and Trust?

Artificial intelligence is driving sophisticated social engineering and deepfake threats, putting more pressure than ever on digital trust professionals to preserve truth, trust and their companies' reputations.

2 September 2025
Richard Beck
Blog Post

Cyber Insurance in Crisis with AI Blind Spots

Artificial intelligence services used by third-party vendors are complicating the cyber insurance landscape, as no policy can cover what it can not see.

29 August 2025
Tim Sattler
Blog Post

How ISACA Is Building the Next Generation of Leaders

Leadership development is a valuable component of ISACA membership, including opportunities to develop those skills at the local chapter level and leadership-themed webinars, conference sessions and courses.

28 August 2025
Jayakumar Sundaram
Blog Post

Why Smart Organizations Still Choose Structured Processes in the Age of AI

Despite artificial intelligence becoming increasingly prevalent, structured process maturity is still needed for organizations to achieve efficiency, trust and long-term performance.

27 August 2025
ER Kritka
Blog Post

Five Ways AI Is Changing the Threat Landscape

Discover the five critical ways in which AI is changing the threat landscape as we know it – and what we need to do in response.

25 August 2025
Sandeep Dommari
Blog Post

Adaptive Identity Is the Future of IAM and Zero Trust Alone Won’t Get Us There

When it comes to Identity and Access Management, it's time to move away from fixed rules and instead focus on adaptive, risk-aware identity management that evolves in real time.

21 August 2025
AAISM
Blog Post

ISACA Advanced in AI Security Management (AAISM) FAQs

Learn more about AAISM through these frequently asked questions.

19 August 2025
Goh Ser Yoong
Blog Post

How AAISM Can Differentiate Information Security Managers

As AI systems become increasingly sophisticated, the need for pragmatic and robust security management is paramount.

18 August 2025
Andre Porsch
Blog Post

Three Simple But Powerful Strategies to Radically Transform Cybersecurity Culture

Disengaged leadership is often at the core of organizations' cybersecurity failures, but that inadequate culture can be turned around through a few straightforward, practical steps.

18 August 2025
Osman Azab
Blog Post

Building Unshakable Foundations: Why Effective IT Audit is Your Key to Cyber Resilience

Osman Azab previews his upcoming session at ISACA Europe Conference on enhancing cyber resilience through effective IT audit practices.

15 August 2025
Mary Carmichael
Blog Post

Is Vibe Coding Ready for Prime Time?

'Vibe coding' is bringing new approaches for software development, but the speed of code generation makes putting in place strong controls and accountability even more critical.

13 August 2025
Shruthi Gnana
Blog Post

Effective Change Management to Mitigate AI Risks

Shruthi Gnana shares potential risks with the AI model change process and recommendations for reducing risk.

11 August 2025
Keith bloomfield deweese
Blog Post

AI Agents and Agentic AI: Understanding the Difference That Matters for Your Organization

By understanding the differences between AI agents and agentic AI, organizations can make better decisions about which AI solutions best fit their business goals.

8 August 2025
Maman Ibrahim
Blog Post

Proven Strategies to Supercharge Your Cyber Risk Strategy

A Risk Operations Center can serve as a critical survival tool and business enabler that allows organizations to deal with escalating cyber risk in smarter and more rapid fashion.

7 August 2025
Ravikumar Ramachandran
Blog Post

Five Reasons IT Governance Should Not Be Overlooked

The consequences of insufficient IT governance during a time of digital disruption and heavy reliance on technology should convince enterprises to put good governance front and center.

6 August 2025
Emily Bastedo
Blog Post

New US Legislation Enhances Access to ISACA Trainings and Certifications

A new policy will help US-based credential candidates fund ISACA certifications and training through their 529 savings accounts.

4 August 2025
Chris McGowan
Blog Post

Threat Modeling = Proactive Security

ISACA’s white paper, Threat Modeling Revisited, provides a step-by-step process for organizations to integrate threat modeling into their security frameworks.

31 July 2025
James Omorogbe
Blog Post

Multilayer Zero Trust Security: A Blueprint from Biological Cell Architecture

Evolutionary intelligence on display in nature offers a blueprint for modern digital defense, particularly when it comes to approaches to zero-trust security.

30 July 2025
A digital padlock
Blog Post

Defending Against Human-Operated Ransomware Attacks

Successful defense against human-operated ransomware attacks can benefit from categorizing key capabilities into the themes of Reduced Attack Surface, Enhanced Detection, Effective Response and Robust Recovery.

28 July 2025
Tolgay Kizilema
Blog Post

Security Culture as a Measurable, Strategic Asset

Effective security culture is a must for organizations or even the most well-structured compliance programs struggle to deliver the desired, sustainable results.

25 July 2025
George McPherson
Blog Post

AI Governance and the Need for Auditors Well-Trained in AI

Auditors have a key role to play in a healthy AI governance ecosystem, and the new AAIA credential can help audit professionals be better prepared to rise to the occasion.

24 July 2025
Caroline Petroque
Blog Post

Creating Winning Cyber Transformation Business Cases

Learn five proven tactics to win executive support for cybersecurity business cases, beginning with the importance of knowing your audience and tailoring your messaging accordingly.

21 July 2025
Charles Cresson Wood
Blog Post

The New Role of the Chief Artificial Intelligence Risk Officer (CAIRO)

As artificial intelligence introduces new risks that are not yet fully understood, adding a Chief Artificial Intelligence Risk Officer could help organizations sharpen their preparedness.

17 July 2025
Isheanesu Sithole, AAIA, CISSP, CISA, CISM, CRISC, COBIT D&I, ISO27k LI, ISO27k LA, CDPO
Blog Post

Advancing Your IT Audit Career with AI Expertise: An AAIA Success Story

Find out how pursuing the ISACA Advanced in AI Audit (AAIA) credential has left audit professional Isheanesu Sithole feeling empowered with expanded confidence and new capabilities.

15 July 2025
Natalie Hingco Perez
Blog Post

ISACA Career Catalyst Stories: Natalie H. Perez, Internal IT Audit Manager

Natalie Hingco Perez utilized ISACA resources to accelerate her early career growth, and more recently has developed her leadership skills through various roles with the ISACA Melbourne Chapter.

14 July 2025
Onur Korucu
Blog Post

The Compliance-Innovation Dilemma: Rethinking Data Protection and Privacy for Emerging Technologies

Explore how principles like data minimization, federated learning and differential privacy are not just compliance tools, but also innovation enablers.

10 July 2025
Luigi Sbriz
Blog Post

The Challenges of Measuring Risk Culture

Evaluating risk culture requires being able to examine significant indicators of decision-making processes, their daily implementation, the monitoring of outcomes and the responses to challenges.

8 July 2025
Anamika Roy
Blog Post

The Control Matrix: Rebooted

Organizations should see the control matrix as it truly is—not merely a series of separate tasks to be executed, but as a cohesive ecosystem that must operate holistically.

7 July 2025
Jeff Wade
Blog Post

Securing the Welcome: How I Transformed Onboarding into a Business-Driven Cybersecurity Strategy

Jeff Wade shares how to transform a cybersecurity onboarding program by starting early, reinforcing often, and shaping behaviors through clarity.

2 July 2025
Kyle Miller
Blog Post

Why AAIA is the Next Step for CISAs

ISACA's Advanced in AI Audit (AAIA) credential is a natural next step for CISA-certified professionals looking to layer in AI expertise into their audit and assurance qualifications.

1 July 2025
Maman Ibrahim
Blog Post

Proven Strategies to Navigate Leadership Paradoxes in Audit and Risk

Traditional audit and risk frameworks belong to a world that no longer exists at a time of digital upheaval, but there are new opportunities to strengthen the audit and risk functions.

30 June 2025
Yuri Bobbert
Blog Post

ISACA Inspirational Leadership Award Winner Prioritizes Embracing Daily Journey

Yuri Bobbert, ISACA Inspirational Leadership Award winner, says work should be 'fun, inspiring, joyful, and healthy to help cope with failures and setbacks.

27 June 2025
Hassan Ahmed
Blog Post

No Looking Back: Transforming Audit with Artificial Intelligence

IT auditors have traditionally had to rely on looking backward at what already has happened, but with artificial intelligence transforming IT audit, a more forward-looking lens has become possible.

26 June 2025
Chasserae Coyne
Blog Post

Seven Tactics for Overcoming AI Training Obstacles

Organizations face several obstacles in providing sufficient AI training to their teams, but companies must find a way to overcome them if they are going to keep pace with the fast-moving enterprise AI landscape.

25 June 2025
Aditya Patel
Blog Post

How Security Analysts Can Elevate Their Career with ISACA’s CCOA Credential

Security analysts can sharpen their technical skills and investigative capabilities through ISACA's Certified Cybersecurity Operations Analyst (CCOA) credential.

24 June 2025
Sonia Rose lyle
Blog Post

Proactive Approaches to Identify Cyberthreats

Waiting for a cyber attack to take place before jumping into action is not a viable strategy for organizations that are serious about protecting their digital assets.

20 June 2025
Muneeb-imran-shaikh
Blog Post

AI Governance: Dynamics of Legitimacy, Fairness and Transparency

Muneeb Imran Shaikh writes about the need for legitimacy, fairness and transparency in artificial intelligence practices.

18 June 2025
Renaldo Jack
Blog Post

Fortifying the Operational Technology Sector: Battle-Tested Cyber Resilience Strategies

Battle-tested operational technology cybersecurity strategies starts with performing an OT cyber risk assessment and includes focus on foundational controls and multilayered network security.

17 June 2025
Krishan Bagla
Blog Post

A Practical Approach to Integrating Vulnerability Management into Enterprise Risk Management

Organizations can strengthen their vulnerability management and improve their risk posture without expensive tools by utilizing existing resources, fine-tuning internal processes and creating a security-aware culture.

13 June 2025
David Foote
Blog Post

Versatilists in the Vanguard: Why the Future of Info/Cyber Security, Audit, Risk and Privacy Belongs to the Agile

Versatilists connect dots and adapt, characteristics that increasingly are in demand by employers as the digital trust landscape becomes more complex and interconnected.

11 June 2025
Jas Gill, CISA, CISM, Senior Internal Audit Manager at RELX
Blog Post

ISACA Career Catalyst Stories: Jas Gill, CISA, CISM, Senior Internal Audit Manager at RELX

ISACA member Jas Gill says her audit career has progressed since tapping into ISACA credentialing and learning resources, with an emphasis on auditing emerging technologies.

6 June 2025
Aamir Jamil
Blog Post

DORA and NIS2: Connection Points and Key Differences

Compliance with the DORA and NIS2 regulations should not be viewed only as a regulatory obligation but as a strategic opportunity to strengthen digital trust.

5 June 2025
Chidambaram Narayanan
Blog Post

Iron Man’s Due Diligence: How Tony Stark Would Audit J.A.R.V.I.S. Before Deployment

Would your artificial intelligence audit align with industry standards in governance, risk and cybersecurity, and pass an Iron Man-level due diligence check?

3 June 2025
Mohammed J. Khan
Blog Post

The Evolving Connection Points Between AI and Audit

The integration of artificial intelligence (AI) in the audit profession is rapidly transforming how auditors work, enhancing skills development, improving efficiency, and revolutionizing risk analysis and monitoring processes.

30 May 2025
Glenda Suarez Cabrera
Blog Post

Five Mistakes Leading to a Biased Information Security Training and Awareness Program – and How to Avoid Them

Building a quality information security training and awareness program capable of elevating organizations requires intention, investment and a willingness to evolve.

29 May 2025
Advait Patel
Blog Post

Zero Trust in the Age of AI: Securing Cloud Environments Against Evolving Threats

The number of AI-powered attacks continues to grow and are becoming more difficult to detect, and security models using traditional methods are no longer effective.

27 May 2025
Sumit Sharma
Blog Post

Automation and AI/ML Opportunities in Third-Party Risk Assessment

Automation and artificial intelligence/machine learning can set in motion a smarter, faster and more scalable future for third-party risk management.

22 May 2025
Alaina Lawson
Blog Post

Beyond the Moat: Modern Defense- in-Depth Strategies

Just as medieval castles depended upon more than a single knight to stave off potential attacks, modern organizations need a deep arsenal of security tools to protect their critical assets.

21 May 2025
Abdul Jaleel
Blog Post

Five Ways that IT Auditors Can Put AI to Good Use

The success auditors have in leveraging artificial intelligence is dependent upon balancing the technological capabilities with sound governance, clear objectives and a thorough understanding of audit standards.

19 May 2025
Wojciech Misiura
Blog Post

Why IT Auditors Need AAIA: Addressing AI Challenges in Audit

The new ISACA Advanced in AI Audit (AAIA) credential equips auditors for a changing landscape in which artificial intelligence is reshaping roles and presenting auditors with new opportunities.

19 May 2025
Deidre Diamond
Blog Post

IT/OT Convergence: An Era of Interconnected Risk and Reward

Successful IT/OT convergence comes down to aligning three distinct paradigms: IT Operations, OT Operations and Cyber Operations.

15 May 2025
Ope Ajibola
Blog Post

Seven Strategies Business Leaders Can Adopt to Protect Operational Technologies and Critical Infrastructure Against Sophisticated Cyber Threats

Tailored strategies to protect critical assets are needed at a time when the attack surface is expanding, putting critical infrastructure at heightened risk.

13 May 2025
Natasha Barnes
Blog Post

Mindfully Befriending Your Certification Exam-Day Anxiety

Certification exam day can be stressful for exam-takers, but a mindful approach can go a long way toward constructively dealing with the nerves and improving performance.

9 May 2025
Mary Carmichael and Dooshima Dabo'Adzuana
Blog Post

Six Steps for Third-Party AI Risk Management

ISACA members Mary Carmichael and Dooshima Dabo'Adzuana shared their insights in a session on third-party AI risk at RSA Conference 2025.

8 May 2025
Welland Chu
Blog Post

Fortifying Digital Defenses: The Imperative of a Unified Cybersecurity Platform

A data-driven and cost-effective strategy—centered on governance, technology, and human expertise—is the approach organizations need to improve their cybersecurity posture and resilience.

6 May 2025
Carolynn van Arsdale, Content Marketing Manager at ReversingLabs
Blog Post

The 2025 Software Supply Chain Security Report: Threats Growing and Evolving

The threat landscape facing software today is changing fast! RL’s new research report explores those changes and shares key learnings and action items.

5 May 2025
2024 Annual Report
Blog Post

ISACA 2024 Annual Report Showcases Future Focus

The 2024 ISACA Annual Report provides insight into how ISACA is working to future-proof members' careers in a time of volatility and innovation across the digital trust fields.

2 May 2025
Asaf Weisberg
Blog Post

Elevating ISACA's Impact: Building a High-Performing Board for the Future

ISACA Board Director Asaf Weisberg addresses the Board's composition and varied backgrounds in this installment of Notes from the Boardroom.

30 April 2025
Rob Clyde
Blog Post

No More Excuses for Procrastinating on Quantum Preparation

We have an urgency problem when it comes to quantum computing that is rivaling even the underlying technology challenge.

28 April 2025
Donovan Cheah
Blog Post

Preparing Our Stakeholders to Navigate Quantum Computing

Within the cybersecurity space, quantum computing has often been linked to doomsday scenarios such as the cracking of RSA.

28 April 2025
Ravi Ragoonanan
Blog Post

Lessons from the CCOA: Failing Forward as a Cybersecurity Leader

A failed attempt at the CCOA exam provided important lessons learned and deepened my commitment to earning ISACA's new cybersecurity credential.

24 April 2025
Ola Akinsuli
Blog Post

Adaptive Access Control: Navigating Cybersecurity in the Era of AI and Zero Trust

Adaptive Access Control, an AI-driven security approach, gives organizations a better opportunity to counteract the modern, sophisticated threat landscape.

22 April 2025
Freeman Ng
Blog Post

ISACA Career Catalyst Stories: Freeman Ng, Principal Consultant at iSystems Security Limited

A major career change meant that Freeman Ng had to prove himself all over again, and turning to ISACA played a big part in his next phase.

21 April 2025
Massimo Migliuolo
Blog Post

ISACA’s Growing Influence as a Resource for Governments

ISACA's growing policy influence with global governments will create healthier digital trust disciplines and expand opportunities for ISACA members.

18 April 2025
Chidambaram Narayanan
Blog Post

Welcome to the IT Audit Awards: Ctrl + Alt + Defend Night

From Phantom Access to the Longest Audit Report and beyond, these IT Audit Awards come in many categories that might not be as much of a joke as we'd like to think.

17 April 2025
Liz Kinuthia
Blog Post

Practical Strategies to Overcome Cyber Security Compliance Standards Fatigue

Elizabeth Kinuthia shares three practical strategies cyber teams can deploy to overcome compliance fatigue.

16 April 2025
Mary Carmichael
Blog Post

An Overnight Wakeup Call: Coordinating Responses to Major Cyber Attacks

Gamification can be an effective approach to trust-building that will allow diverse stakeholders to be better prepared to deal with stressful and high-stakes cybersecurity incidents.

14 April 2025
Michelle Moore
Blog Post

CIO vs. CISO: The Key Differences — and Why They Matter

Discover the key differences between the CIO and CISO positions — including responsibilities, education and certifications — and why they matter.

10 April 2025
Maman Ibrahim
Blog Post

Lessons from The Art of War: A Fresh Look at Modern Auditing

Maman Ibrahim shares the lessons auditors can learn from Sun Tzu's The Art of War.

9 April 2025
Varun Prasad
Blog Post

Building AI Governance by Design

An artificial intelligence governance culture balancing safety and innovation is important to effectively deal with AI risks and enhance the trustworthiness of AI systems.

7 April 2025
Pam Nigro
Blog Post

My Transformational Journey: from Chapter Leader to the ISACA Global Board

Pam Nigro shares how her years in ISACA chapter leadership compares and contrasts to her current role on the ISACA Global Board of Directors, and what has helped her progress along the way.

3 April 2025
Jack Freund
Blog Post

A Multilayered Framework for Trusting Cyberrisk Models

A multilayered framework for evaluating trust in cyberrisk models enables organizations to effectively assess whether a model is fit for purpose and worthy of confidence in its outputs.

2 April 2025
Aditya Patel
Blog Post

Navigating the Future: 6 Cybersecurity Career Paths Shaped by AI

Artificial intelligence is causing organizations and practitioners to reimagine the approach to numerous roles across the cybersecurity profession.

31 March 2025
Ramona Ratiu
Blog Post

Technology as a Tool for Empowerment, Not Exclusion

Ramona Ratiu, winner of ISACA's Technology for Humanity Award, advances cybersecurity careers and empowers women in tech. Learn more about her leadership journey.

28 March 2025
Arnulfo Espinosa Domínguez
Blog Post

Extreme Auditing: Pushing the Boundaries of IT Assurance

Extreme auditing calls for the ability to jump in and assess anything, no matter how unexpected or unfamiliar, and it is a skill set that increasingly will come in handy for IT auditors.

27 March 2025
Richard Beck
Blog Post

Hackers Don’t Play by Rules: Neither Should You

As technology and the threat landscape continue to evolve and become increasingly sophisticated, organizations can no longer afford to let red vs. blue rule-bound perceptions put them at a disadvantage against hackers.

26 March 2025
James Omorogbe
Blog Post

Four Strategies Web3 Companies Can Deploy to Cost-Effectively Improve Cyber Resilience

James Omorogbe provides five low-cost cybersecurity strategies that Web3 companies can implement to enhance their cyber resilience while keeping expenses in check.

25 March 2025
Ookeditse Kamau
Blog Post

Follow-Up Audits and Follow-Up Process: The Auditor’s Impact Litmus Tool

Structure, evaluation criteria and reporting are all key aspects of the audit follow-up process that can determine the effectiveness of IT auditors' recommendations.

20 March 2025
ER Kritka
Blog Post

Artificial Intelligence and Machine Learning: A Double-Edged Sword

While artificial intelligence tools continue to grow more effective, cybercriminals use the same capabilities to accomplish complex attacks and intrusions.

19 March 2025
Patrick Trierweiler, A-LIGN Senior Consultant
Blog Post

PeopleOps, Not Human Resources, for Stronger System Security

A change in perspective can allow organizations to better see the risk and value of key controls and may prevent your source code from ending up on Discord.

17 March 2025
Niki Gomes
Blog Post

ISACA Career Catalyst Stories: Niki Gomes, Senior Internal Auditor

Niki Gomes, an audit professional and ISACA volunteer, says the relationships she has built through ISACA have made her career journey more enjoyable.

14 March 2025
Guy Pearce
Blog Post

CIO 4.0: Redefining IT Leadership

CIOs and other IT leaders have the opportunity to integrate sustainability into the core of IT operations, accentuating IT’s role as a catalyst for competitive advantage.

13 March 2025
Jamie Norton
Blog Post

Diving In: My First 90 Days on the ISACA Board

Jamie Norton, the newest addition to the ISACA Board of Directors, shares behind-the-scenes insights from his first few months in the ISACA boardroom.

12 March 2025
José David Pino
Blog Post

Challenging CISA Exam Myths: A Non-IT Auditor’s Perspective

José David Pino shares his CISA experience to encourage audit professionals with non-IT backgrounds to embark on the CISA certification journey.

11 March 2025
SheLeadsTech Scholarship Winners Share Visions for the Future
Blog Post

SheLeadsTech Scholarship Winners Share Visions for the Future

SheLeadsTech scholarship winners outline their visions for the future and what the scholarship has meant to them as they work toward entering digital trust professions such as security and GRC.

7 March 2025
Jenny Tan
Blog Post

Let’s Keep the Progress Coming for Women in Tech

ISACA research shows most women are satisfied with their career progression in the tech workforce but there are still areas for more headway to be made.

5 March 2025
Chidambaram Narayanan
Blog Post

When Harry Met SALY: A Love-Hate Story in Audit Risk Assessment

'Same As Last Year' does not cut it for IT auditors looking to successfully adapt to new risks and opportunities.

3 March 2025
Jeff Wade
Blog Post

Achieving Seamless Privacy by Design Through Secure by Design Practices

When organizations approach privacy as a design principle, it drives operational excellence and helps organizations to achieve regulatory compliance.

28 February 2025
Richard Beck
Blog Post

Financial Services Under Threat by Adversarial AI

Adversarial AI—the act of manipulating AI systems to function in unintended or harmful ways—is a growing, overlooked threat that will require updated frameworks in the financial sector.

27 February 2025
Sampa David Sampa
Blog Post

ISACA Career Catalyst Stories: Sampa David Sampa, CISA, IGP

ISACA member Sampa David Sampa, an IT audit professional from Zambia, says ISACA continues to play a central role in shaping his career journey.

24 February 2025
Subrat Mishra
Blog Post

From Theory to Practice: Real-World Risk Management, Starting with Ourselves

Training and development should be a non-negotiable element in developing an effective approach to risk management.

20 February 2025
Jeff Wade
Blog Post

Accelerating Secure by Design by Meeting Teams Where They Are

By focusing on people, sharpening processes, and strategically integrating technology, organizations can achieve security by design and ensure security is embedded in their DNA.

18 February 2025
Eugene Leow
Blog Post

Automating Incident Response: Six Practical Steps for Faster, Smarter Cyber Defense

By prioritizing automation while also relying upon human capabilities, cybersecurity professionals can better contain incidents and reduce the time it takes to effectively respond to them.

17 February 2025
Grant Hughes
Blog Post

Developing a Cyber Strategy and the Seven Pillars of Cyber Resilience

An effective cybersecurity strategy that includes critical pillars of cyber resilience, such as embedding security into the design phase and prioritizing basic controls, can drive business success.

14 February 2025
Keri Bowman
Blog Post

SOX Audit-Ready in Minutes: Streamlined Compliance Reporting

By automating key aspects of the audit process, standardizing reports and producing actionable data, organizations' compliance efforts will go more smoothly.

12 February 2025
Patrick Trierweiler, A-LIGN Senior Consultant
Blog Post

Just Call It a Security Incident

More honesty, accuracy and transparency is needed when it comes to organizations acknowledging and reporting security incidents.

10 February 2025
State of Privacy
Blog Post

Exploring the State of Privacy in 2025

ISACA’s State of Privacy 2025 report delves into the latest trends in staffing, budgets, training and obstacles from more than 1,600 global professionals.

5 February 2025
Chasserae Coyne
Blog Post

COBIT: A Practical Guide for AI Governance

To keep up with the speed of business, organizations need to move fast to stay competitive and improve their market share.

4 February 2025
Mary Carmichael
Blog Post

Five Ways for Risk Professionals to Work More Efficiently in 2025

Work smarter, not harder.” It’s a simple idea, but in risk management, it’s a game-changer.

31 January 2025
Erik Prusch
Blog Post

Kicking off 2025 with a New Mission and Vision

Input from members and chapter leaders around the world are reflected in ISACA's new mission and vision statements, which includes emphasis on how members will be supported throughout their career journeys.

29 January 2025
New CCOA Fills Gap in Technical Cybersecurity Credential Offerings
Blog Post

New CCOA Fills Gap in Technical Cybersecurity Credential Offerings

The new Certified Cybersecurity Operations Analyst (CCOA) credential is designed for security professionals with two or three years of experience who aspire to be information security/cybersecurity analysts and related roles.

29 January 2025
Maman Ibrahim
Blog Post

Positioning DORA Compliance as a Strategic Advantage for Digital Trust and Operational Excellence

If approached properly, the Digital Operational Resilience Act (DORA) can be a strategic tool to help organizations solidify operational continuity and earn stakeholder trust.

28 January 2025
Melanie Wijeratna
Blog Post

ISACA Career Catalyst Stories: Melanie Wijeratna, CISM | PROSCI

ISACA member Melanie Wijeratna draws inspiration and motivation from her father's life as she advances her career journey in cybersecurity.

27 January 2025
Chidambaram Narayanan, Chartered Accountant, CISA, Azure Cybersecurity Architect Expert (SC-100)
Blog Post

Don’t Let Excuses Hold You Back: Ten Reasons Why the CISM Certification is Worth the Effort

The Certified Information Security Manager (CISM) certification consistently ranks among the most sought-after credentials in cybersecurity.

23 January 2025
Duane Gran
Blog Post

Reframing the Way Organizations Think About Privacy

ISACA’s State of Privacy 2025 report highlights trends in the industry around staffing, collaboration and increasing demands on privacy teams.

21 January 2025
Julie Chatman
Blog Post

Words Matter: Why Zero Trust Needs a New Name

Zero Trust has become a leading cybersecurity approach but the term itself can be counterproductive in organizations' efforts to gain buy-in from business stakeholders.

17 January 2025
RV Raghu, Past Board Director, ISACA, and director of Versatilist Consulting India Pvt. Ltd
Blog Post

Leveraging AI for Enterprise Innovation

RV Raghu previews his ISACA Virtual Conference session in which he will explore ways in which enterprises can leverage artificial intelligence for innovation and how they can best approach their AI initiatives

16 January 2025
Jason Lau Blog
Blog Post

Artificial Intelligence in the Boardroom: ISACA’s Approach to AI and Cybersecurity

How ISACA’s board is providing oversight around artificial intelligence’s impact on ISACA and its global membership.

14 January 2025
Megan Hall
Blog Post

Five Ways to Make Better Use of Emerging Technology in the New Year

When it comes to making better use of artificial intelligence and other emerging technology, having consistent processes for staying informed and measuring risk can go a long way.

10 January 2025
Neil Harper
Blog Post

Five Ways Security Professionals Can Start the New Year Strong

By enhancing engagement with enterprise leadership and better anticipating key cyber risks, security professionals will be on their way to a great year ahead.

9 January 2025
Onur Korucu
Blog Post

Five Ways Privacy Professionals Can Start the New Year Strong

Privacy professionals must embrace change in the evolving technology and regulatory landscape, turning risks and opportunities alike into drivers of their organizations' success.

8 January 2025
Ramona Ratiu
Blog Post

Five Ways Risk Professionals Can Start the New Year Strong

Identifying and leveraging reliable information sources is a useful starting point for risk professionals looking to solidify their good practices for the year ahead.

7 January 2025
Patrick Trierweiler, A-LIGN Senior Consultant
Blog Post

Five Ways Audit Professionals Can Start the New Year Strong

A fresh start for IT auditors in 2025 is possible, but closing out lingering loose ends from last year likely requires attention before embracing the clean slate.

6 January 2025
Rui Feng Isaac Lee
Blog Post

The Synergy Between Generative AI and IS Audit

Applying Generative AI to the audit profession can be done more effectively when the data involved is examined carefully to ensure its quality is reliable.

3 January 2025

ISACA Now By Year

Check Mark 2025
Check Mark 2024
Check Mark 2023
Check Mark 2022
Check Mark 2021