ISACA Now Blog

ISACA Now offers global perspectives and real-time insights on evolving challenges and opportunities facing our professional community—engage with leaders, experts and practitioners today.

Featured Blog

The Unwitting Accomplice Behind the Modern Insider Threat

The threat category we often underestimate is already inside our organization, authenticated with valid credentials, interacting with systems just as they were designed to, and it may not even be human.

Read now

Icon of a person holding a briefcase, next to two up arrows

ISACA Career Catalyst Member Stories

Explore our Career Catalyst series to see how members have turned to ISACA for support at different points of their career journeys.

Read now

View Recent Posts

15 of 1518 Results

Blog Post

When AI Joins the Party, Vulnerability Backlogs Become Fiction

A clean vulnerability backlog is not necessarily a sign that an organization is well prepared to thwart cyber attackers.

18 June 2026

Blog Post

Neural Data as a Cyber Kill Chain Enabler: Redefining Data Classification and DLP for the Neurotechnology Era

The attack surface within an enterprise has increased in a manner that most governance frameworks did not envision. With organizations moving to deploy neurotechnology at scale, they are creating a type of data that their current classification schemas were not designed to deal with.

17 June 2026

Blog Post

The Unwitting Accomplice Behind the Modern Insider Threat

Artificial intelligence agents, copilots, orchestration frameworks, autonomous workflows, machine identities, and more operate with trusted access across enterprise environments, resetting the insider threat landscape.

16 June 2026

Blog Post

CMMC as a Business Design Decision, Part 3: Measure What Leadership Cares About

Explore key metrics that help to connect CMMC to business outcomes that resonate with boards of directors and executive leadership.

11 June 2026

Blog Post

Unlocking Security: How a Routine Audit Transformed Secrets Management at a Multinational Conglomerate

A routine audit revealing hardcoded API keys in a multinational conglomerate's CI/CD pipeline set in motion a recalibration of their secrets management, underscoring the importance of addressing blind spots for increased security, efficiency and agility.

10 June 2026

Blog Post

The Audit Evidence Crisis: How AI Deepfakes Are Rewriting Assurance Standards

With AI creating flawless deepfakes, auditors can no longer afford to start with trust; auditors must begin with zero trust, verify relentlessly, and only then decide what can be trusted.

8 June 2026

Blog Post

Cyber Readiness as Competitive Advantage in the AI Era

Forward-thinking companies can leverage AI-enabled simulations and readiness programs to build robust cyber resilience.

5 June 2026

Cover illustration of a cube integrated with a network, representing concepts of connectivity and technology.

Blog Post

Blockchain Auditing in Practice: What Executives Need to Understand Now

Blockchain systems do not eliminate risk, but rather shift its location, requiring executives to understand where control truly lives in these environments.

3 June 2026

Blog Post

AI’s Impact on ISACA Certification Pay Premiums: Demand Growing for Governance, Audit and Risk Expertise

CISA, CRISC and CGEIT are among only 17 of 663 industry IT certifications to make Foote Partners’ “Hot List” of certifications earning well above average cash pay premiums in early 2026.

2 June 2026

Blog Post

Managing Malevolent AI Agents

Artificial intelligence agents are not secured by making them behave, but rather by ensuring that even if they do not, they are not able to cause material harm.

29 May 2026

Blog Post

The Strategic ROI of Privacy-Enhancing Technologies (PETs) in the AI Era

Privacy-enhancing technologies are the business enablers that allow organizations to move faster in the era of artificial intelligence.

28 May 2026

Blog Post

Cloud Security Posture Management: The Control Plane for Modern Cloud Risk

In an era where infrastructure is temporary but risk is persistent, continuous posture management becomes a foundational element of cyber resilience.

27 May 2026

Blog Post

Future to Bring New Tasks, Same Purpose for ISACA Members

Professionals who keep purpose top of mind instead of focusing heavily on the specific tasks they are used to performing will be better positioned to thrive in the dynamic tech workforce of the future.

27 May 2026

Blog Post

When Cybersecurity Met Soccer: The World’s Most Beautiful Game Meets the World’s Most Complex Digital Challenges

Cybersecurity and soccer both call for reading the environment, proactively anticipating opponents' moves and making quick decisions under pressure, as well as requiring leaders who see patterns in the chaos.

27 May 2026

Blog Post

Five Questions Leaders Should Answer Before Piloting Advanced AI or Quantum-Enabled Systems

Before organizations pilot advanced AI models or quantum-enabled systems, leaders need to address the following governance questions that determine whether the foundations for responsible experimentation are already in place.

26 May 2026