Artificial Intelligence in the Boardroom: ISACA’s Approach to AI and Cybersecurity

Additional resources

How the ISACA Board and Executive Management Address Cyber Risk

The ISACA Board takes extensive action to understand and address cybersecurity risk while aligning cyber risk management with strategic business objectives.

Inside the Audit Committee: Roles, Responsibilities and Qualifications

Our Notes from the Boardroom blog series continues with a detailed look at the role and responsibilities of ISACA's audit committee.

Leveraging Artificial Intelligence for Enhancing Security and Privacy in Modern Computing Systems

Artificial intelligence can play a significant role in enhancing the security and privacy disciplines, but governance and ethical implications must remain top-of-mind considerations.

Artificial Intelligence Training and Resources

Build AI skills at any level. Access articles, whitepapers, and publications. Explore new training courses and discover how to harness AI's power for success.

Notes from the Boardroom: vol. 7

Editor’s note: “Notes from the Boardroom” is a series of blog posts from ISACA board directors providing transparency, context and perspective on how the ISACA board is carrying out its governance responsibilities. In this installment, we address how ISACA’s board is providing oversight around artificial intelligence’s impact on ISACA and its global membership.

Artificial intelligence (AI) is revolutionizing industries, with 65% of businesses now investing in Generative AI to assist with everything from basic document reviews and editing, to enhancing automated workflows, to co-piloting more advanced research, bolstering cybersecurity and much more. Recognizing its transformative role, ISACA is strategically leveraging AI to drive innovation and equipping members with the knowledge and tools needed to navigate an AI-driven future.

This blog post explores how the ISACA Board is embracing AI, both internally and with an eye toward what our global membership needs to enhance their knowledge. AI plays important significance to our mission, considering its applications across operations and governance, and its potential to shape the future of our global membership.

AI’s Importance within ISACA

ISACA’s emphasis on innovation is driven by the Innovation and Technology Committee, which plays a pivotal role in exploring AI’s potential. This committee facilitates thoughtful discussions about how AI can improve operations and deliver value to members.

Key areas of focus:

• Hosting sessions to identify AI-driven opportunities for organizational improvement
• Collaborating with chapters to identify region-specific use cases for AI
• Aligning innovation initiatives with robust cybersecurity and risk management strategies through close collaboration with the Audit & Risk Committee

Developing Formal AI Policies and Procedures

To ensure the responsible adoption of AI, ISACA has introduced comprehensive policies and procedures that guide its use within the organization. These policies underscore ISACA’s dedication to ethical practices and risk mitigation.

Key areas of focus:

• Establishing guidelines for the ethical use of AI tools
• Implementing policies for Generative AI usage and ongoing whitelist of approved tools
• AI champion within the IT department to help spearhead AI initiatives

Advocacy for Member Content on AI, Cybersecurity and GRC

Recognizing the increasing relevance of AI to its members, ISACA has prioritized creating resources that explore how AI intersects with cybersecurity and audit, as well as governance, risk and compliance (GRC). These resources aim to provide members with the tools and knowledge to navigate these complex areas effectively. These efforts keep members informed and prepared for the challenges and opportunities presented by AI.

Key areas of focus:

• Partnering with thought leaders to deliver high-quality insights and practical guidance
• Engaging with chapters worldwide to distribute resources and foster AI literacy
• Publishing educational materials on AI topics, including the following examples:
  • The Promise and Peril of the AI Revolution: Managing Risk
  • Understanding the EU AI Act: Requirements and Next Steps
  • Artificial Intelligence Fundamentals Study Guide
  • AI Essentials Online Course
  • Auditing Artificial Intelligence
  • AI Governance: Principles, Strategies and Business Alignment Course
  • Artificial Intelligence: A Primer on Machine Learning, Deep Learning, and Neural Networks
  • AI in Cybersecurity: How to Cut Through the Overhype and Maximize the Potential

AI Certification Development

ISACA is committed to equipping its members with the skills required to navigate the AI landscape. This commitment includes the development of certifications that address AI governance, ethics and risk management, with more on this to come in the year ahead.

Key areas of focus:

• Designing certification programs and training that emphasize the strategic and ethical challenges and risks of AI
• Aligning content with globally recognized frameworks to ensure relevance and applicability
• Introducing specialized modules on topics such as cybersecurity-enhanced AI compliance and the integration of AI into cybersecurity frameworks

A Global Perspective on AI in the Boardroom

ISACA’s Board of Directors reflects a diverse mix of industries and regions, providing a valuable global perspective on AI. For example, board members, focus groups and trusted industry experts from different regions have contributed insights into AI regulatory frameworks, which has shaped ISACA’s strategies for compliance, innovation and content for our members globally. This diversity ensures that ISACA’s AI initiatives are inclusive, comprehensive and attuned to varied global challenges. Personally, I have been actively involved with testing new AI models and contributed to ethical AI frameworks for data privacy regulators in Asia. My teams and I have also been exploring different use cases for agentic AI workflows to streamline and improve operational cybersecurity.

By drawing on the varied expertise of board directors, ISACA can identify emerging AI trends and risks, while addressing unique cultural, regulatory and technological contexts. This approach balances innovation with ethical considerations, promoting a well-rounded and responsible perspective on AI and content for our members.

Board members are also encouraged to further their personal knowledge. Programs such as the National Association of Certified Directors (NACD) have helped many on the Board understand and appreciate the risks of emerging technologies like AI, cybersecurity and the impact to organizations. By prioritizing education and upskilling for board directors, and encouraging proactive conversations about AI’s potential impact, ISACA is setting a standard for informed and forward-thinking governance in the AI era.

Empowering Our Global Community

Artificial intelligence is reshaping the way organizations operate and govern. At ISACA, the Board of Directors is committed to embracing this change internally within the organization and appreciating the urgent need by membership to gain access to more content around AI. ISACA will continue to empower its global community to navigate the challenges and opportunities of AI while upholding its mission of advancing digital trust. AI is only in its early stages, with much more excitement and impact to come, and ISACA is committed to helping our members to be ready for the future. I look forward to providing further updates on ISACA’s AI progress in the coming months.