Store | ISACA

No image available

CPE on Demand: Risk Essentials Bundle

Risk Essentials Bundle

CPE on Demand: How to Perform a Risk Assessment

How to Perform a Risk Assessment

AI & Enterprise Risk Management

Description: This webinar is ideal for IT leaders and risk management professionals who are eager to revolutionize their enterprise security strategies with cutting-edge AI tools from Cyberhaven, ensuring robust data protection and streamlined compliance processes. Transform your enterprise risk management strategy with AI-powered solutions that enhance data security, automate compliance, and protect sensitive information. Discover how Cyberhaven can help you streamline risk detection and response while ensuring regulatory compliance in an increasingly complex digital landscape. After attending this webinar, attendees will be able to: Unlock AI-Driven Risk Insights Discover hidden risks with advanced AI insights Gain clarity on data movements through AI analysis Learn predictive risk assessment via AI-driven tools Boost Compliance & Data Security Ensure compliance with automated oversight tools Secure sensitive data through automated protection Simplify audits by automating compliance checks Streamline Risk Detection & Response Accelerate threat detection with AI-driven responses Reduce response time with seamless identification Enhance security posture with quick, actionable insights Don't miss out on this exclusive opportunity to gain complementary access to game-changing insights on AI and enterprise risk management—available on your schedule, anytime. Sign up now to stay ahead of the curve and revolutionize your risk management strategy with Cyberhaven's leading experts. Speaker: Dan Walsh, Chief Information Security Officer, Datavant Access until: 12 pm CT on 1 February 2027

Session Recording: Privacy Management Collection

Closing the Loop: Running GRC on Real-Time Data Across Governance, Risk, and Engineering

Description: Continuous evidence gathering is no longer the frontier — many GRC programs already automate collection. Yet governance still runs on periodic cycles: evidence pools up for audit while decisions, ownership, and policy lag behind the environment they govern. Collection changed; governance did not. This session puts governance at the center of a continuous control loop — sense, govern, remediate, refine — where live evidence directly drives governance decisions: a real-time posture for leadership, findings owned and driven to verified closure, full-population assurance for auditors, and policy that updates from outcomes. A worked control runs across NIST CSF, ISO/IEC 27001, SOC 2, and COBIT. Learning Objectives: -Diagnose where point-in-time, compliance-only evidence introduces sampling risk, stale data, and broken handoffs between governance, risk, audit, and engineering. -Map a single control finding across multiple frameworks (NIST CSF, ISO/IEC 27001, SOC 2, and COBIT) and trace it from strategic objective down to live implementation. -Design a continuous control loop — sense, govern, remediate, refine — that routes each finding to an owner, drives it to verified closure, and feeds the outcome back into policy. -Define measurable success criteria (mean time to remediate, control coverage, full-population audit readiness) for moving a program from documented to continuously demonstrable. -Evaluate evidence against admissibility criteria — provenance, freshness, source integrity, and completeness — so only defensible evidence stands behind a risk decision. Speaker: Prashanth Srinivas Sriraj, CISSP, CISM, CEO and Principal AI & Cybersecurity Architect, Bytoid Inc. Access until: 12pm CT on 4 February 2027

2025 ISACA Conferences: Risk Collection

Managing Cyber Risk in the New Age of AI

Description: If creating a policy is your solution for managing AI Risk, you are steaming full speed ahead… on the Titanic. AI is here to stay because it makes business sense—risk and cyber professionals must navigate its risks to realize its rewards. Join cyber risk leader Randy Lindberg as he explores how AI Risk impacts Governance, Risk, Compliance, Vendor Security, and Incident Response. Join the webinar to learn about: • New risks introduced by AI • New controls to mitigate AI risks • The need for continuous monitoring • How NIST AI RMF relates to Cyber Risk • A comprehensive AI Risk Management Model Speaker: Randy Lindberg, MBA, CISSP, CRISC, CISM, Founder and CEO, Rivial Data Security Archived until: 12:00PM CT on 2 October 2026

From Risk to Resilience: A Compliance-Driven Patch Strategy

Description: In this session, attendees will explore practical strategies to align IT operations with audit and risk management frameworks. Learn how to automate remediation workflows without sacrificing traceability, reduce audit fatigue with evidence-ready reporting, and avoid costly oversights through real-world examples of patching failures and their consequences. What You’ll Learn: -How patch management maps to key controls in NIST, ISO 27001, CIS, and COBIT frameworks -Practical steps to align IT operations with audit and risk oversight -Best practices for automating remediation workflows while maintaining traceability and compliance -How to reduce audit fatigue with evidence-ready reporting for patching activities -Real-world examples of how missed patches led to audit findings or security incidents—and how to avoid them Speaker: Gene Moody, Field CTO, Action1 Archived until: 12:00PM CT on 4 September 2026

Managing Enterprise Access Risk in a Multi-Application World

Description: Access risk and control models designed for single ERP environments no longer reflect how modern enterprises operate at scale. As organizations expand across procurement, HR, finance, and other line-of-business applications, access governance becomes distributed, business-owned, and increasingly complex. This session examines how enterprise-wide access risk evolves across ERP and critical business systems in real-world operating environments, and why traditional controls such as segregation of duties, user access reviews, and privileged access processes struggle to keep pace. Attendees will gain insight into how access governance must adapt to support modern governance and assurance expectations across the enterprise. Speaker: Susan Stapleton, Vice President, Customer Advisory, GRC Expert Access until: 12:00 pm CT on 16 April 2027

The Audit Mindset: The Most Underrated Career Skill in Business

Description: Here’s the thing nobody tells you in college: audit is everywhere. It’s not just IT, or finance, or compliance. It’s a mindset. The same principles that drive IT audit—objectivity, evidence-based evaluation, and risk management—apply to every corner of an organization, from HR to operations to strategy. In this 60-minute session, ISACA and HRCP dig into how audit thinking cuts across disciplines and why it’s becoming a must-have skill in today’s workforce. You’ll see how IT audit concepts can sharpen hiring, strengthen accountability, and transform how teams assess risk and performance. This isn’t theory. It’s about learning to see systems, spot gaps, and fix what’s broken before it breaks you. And once you understand the audit mindset, you can apply it anywhere: teaching, hiring, leading, or building your own career path. Whether you’re guiding students, developing talent, or reinventing yourself, this conversation will change how you think about audit, and why it just might be the smartest skill no one’s talking about. You’ll Learn how to: -Turn audit thinking into a superpower that strengthens decision-making in HR, business, and beyond. -Show students the value of audit skills that boost employability and career confidence across industries. -Bring the audit mindset into the classroom with content derived from globally recognized audit certifications -Design transdisciplinary programs that connect audit, risk, and strategy to real-world outcomes. -Use audit credentials to fuel career pivots, helping professionals stand out and move up. Hear from industry thought leaders on the overall: -Laura Middleton | President of Human Resource Certification Preparation (HRCP) -Wesley Ladd | Associate Director at LSU Center for Internal Auditing and Cybersecurity Risk Management Speakers: Jeff Angle, Senior Director, Academic and Workforce Development, ISACA Laura Middleton, Co-Founder and CEO, HRCP, L.C. Wesley Ladd, MBA, CISA, CISSP, Associate Director, LSU Center for Internal Auditing and Cybersecurity Risk Management Archived until: 12:00 pm CT on 26 February 2027

Official AAIR Bundle Virtual Workshop December 16

Join us for an immersive 2-day virtual training event that explore topics around the ISACA Advanced in AI Risk™ certification (AAIR™). This course builds upon existing IT risk best practices and focuses on validating expertise necessary to identify and evaluate AI risk for responsible enterprise adoption. Enrollment includes the AAIR Review Manual (eBook edition), AAIR Questions, Answers and Explanations Database (QAE) as well as the exam cost. Date: December 16-17, 2026 Time: 8:30-5:00 CT (GMT -6) Transfer Date: Tuesday, 8 December 2026 Cancellation Date: Tuesday, 8 December 2026 Last Date to Register: Tuesday, 8 December 2026

Official AAIR Bundle Virtual Workshop September 28

Join us for an immersive 2-day virtual training event that explore topics around the ISACA Advanced in AI Risk™ certification (AAIR™). This course builds upon existing IT risk best practices and focuses on validating expertise necessary to identify and evaluate AI risk for responsible enterprise adoption. Enrollment includes the AAIR Review Manual (eBook edition), AAIR Questions, Answers and Explanations Database (QAE) as well as the exam cost. Date: September 28-29, 2026 Time: 8:30-5:00 CT (GMT -6) Transfer Date: Friday, 18 September 2026 Cancellation Date: Friday, 18 September 2026 Last Date to Register: Friday, 18 September 2026

Audit Blind Spots in Modern Cloud: Risks Audits Keep Missing

Description: As organizations rapidly adopt cloud platforms, traditional audit approaches often fail to identify the risks that matter most. This webinar explores common audit blind spots in modern cloud environments, including misconfigurations, identity sprawl, excessive permissions, and ineffective continuous monitoring. Attendees will learn why checklist-based audits fall short in dynamic cloud environments and how leveraging Cloud Security Posture Management (CSPM) and risk-based audit techniques can significantly improve assurance. Practical examples will illustrate how auditors and risk professionals can enhance visibility, prioritize findings, and provide stronger assurance to leadership. After attending this webinar, attendees will be able to: -Identify common cloud security risks and misconfigurations that traditional audit programs frequently overlook. -Understand why periodic, point-in-time audits are insufficient for cloud environments and how continuous change introduces audit gaps. -Explain how Cloud Security Posture Management (CSPM) tools support continuous risk identification, control validation, and audit evidence collection. -Apply practical techniques to modernize cloud audit programs, aligning audit, security, and risk teams around continuous assurance. Speaker: Michael Ratemo, CISA, CRISC, CISM, CDPSE, CISSP, CCSP, GCSA, Principal Security Advisor, Cyber Security Simplified Archived until: 12:00pm CT on 17 February 2027

Official AAISM Bundle Virtual Workshop September 21

Join us for an immersive 2-day virtual training event that explore topics around the ISACA Advanced in AI Security Management™ certification (AAISM™). This course builds upon existing security management best practices and focuses on the associated threat landscape to best manage the risk profile and effectively leverage AI into security operations. Enrollment includes the AAISM Review Manual (eBook edition), AAISM Questions, Answers and Explanations Database (QAE) as well as the exam cost. Date: 21-22 September 2026 Time: 8:30-17:00 CT (GMT -6) Transfer Date: Monday, 7 September 2026 Cancellation Date: Monday, 7 September 2026 Last date to register: Tuesday, 16 September 2026

Strategies for Auditing in the New World

Description: This webinar will be a panel discussion with Chief Audit Executive across the globe. This discussion will focus on best practices and lessons learned from 2025. The discussion will also cover strategies for creating effective audit plans for 2026 and what areas that should be considered as it relates to risk, security, and emerging technologies. Finally, the session will cover how to effectively engage with the Board of Directors. Learning Objectives: Attendees will learn the components of an effective audit plan. Attendees will gain an understanding of how to effectively engage with senior management and the board of directors to ensure alignment of critical objectives. Attendees will learn best practices for leading an audit team and real-world examples of the daily management of an audit department. Speakers: Mark P. Ruppert, CPA, CIA, CISA, Chief Auditor, Northern Arizona University; Robert Clark Jr., Chief Audit & Compliance Officer, Howard University; Ram Vijayanathan, CISA, CIA, Vice President of Internal Audit, Pinterest, Inc.; and Robert Findlay, CGEIT, Global Head of IT Audit, Glanbia Access until: 12 pm CT on 15 January 2027

From Identity Visibility to Governance and Control

Description: Many organizations face an identity crisis—fragmented systems, manual processes, and unchecked privileges that create risk, inefficiency, and audit fatigue. But identity management doesn’t have to be complex or reactive. Join Netwrix expert Kate Fleming to learn how to turn identity chaos into clarity and control. See how automation, attestation, and delegation combine to deliver visibility, consistency, and accountability across every stage of the identity lifecycle. Walk away with practical strategies to simplify access management, strengthen governance, and give your business the agility to move faster and operate with confidence. Speaker: Kate Fleming, Senior Product Manager, Netwrix Access until: 12:00 pm CT on 2 April 2027

Negotiating Your Seat at the Table

Description: Negotiation isn’t a rare "new job, new salary conversation" moment - it’s something you do constantly, often without noticing. This session will help you become intentional, confident, and effective every time it matters. We’ll dig into the psychology behind negotiation, how to regulate emotions under pressure, and what it takes to stay steady when you hear “no”. You’ll also get a handle on the core tactics: preparing properly, knowing what to ask for, reading timing and body language, and using practice to turn knowledge into instinct. By the end, you won’t just understand negotiation - you’ll feel equipped to do it. Learning Objectives: Appreciating that negotiating is everywhere Key tactics to approach a negotiation Practical techniques to utilize throughout a negotiation Learning to deal with a “no” Speaker: Elisabeth Prager, Founder, The Mad Money Club Access until: 12:00 pm CT on 2 June 2027

Beyond Content Inspection: Modern DLP for AI

Description: Content based DLP controls were designed for an era where sensitive data stayed inside files and followed predictable workflows. In today’s AI enabled enterprise, data fragments, recombines, and moves across endpoints, browsers, cloud applications, and generative AI tools, often without clear policy signals. This webinar explains why content inspection alone provides an incomplete view of data risk and how organizations can enhance DLP using contextual intelligence such as data lineage, behavioral analytics, and AI assisted investigations. Attendees will learn how modern approaches improve detection accuracy, reduce false positives, and support compliance, insider risk management, and AI governance. Speaker: Cole Padula, Solutions Engineer, Cyberhaven Access until: 12 pm CT on 5 March 2027

CPE on Demand: IT Risk Management Essentials

About this Session Recording

You might also like

CPE on Demand: Risk Essentials Bundle

CPE on Demand: How to Perform a Risk Assessment

AI & Enterprise Risk Management

Session Recording: Privacy Management Collection

Closing the Loop: Running GRC on Real-Time Data Across Governance, Risk, and Engineering

2025 ISACA Conferences: Risk Collection

Managing Cyber Risk in the New Age of AI

From Risk to Resilience: A Compliance-Driven Patch Strategy

Managing Enterprise Access Risk in a Multi-Application World

The Audit Mindset: The Most Underrated Career Skill in Business

Official AAIR Bundle Virtual Workshop December 16

Official AAIR Bundle Virtual Workshop September 28

Audit Blind Spots in Modern Cloud: Risks Audits Keep Missing

Official AAISM Bundle Virtual Workshop September 21

Strategies for Auditing in the New World

From Identity Visibility to Governance and Control

Negotiating Your Seat at the Table

Beyond Content Inspection: Modern DLP for AI