ISACA logo
  • ShopCart
    0
  • Get support
  • Credentialing
  • Membership
  • Enterprise
  • Partnerships
  • Training and Events
  • Resources
Need help?Get support
©2026 ISACA. All rights reserved.
  • Certifications
    • CISA – Certified Information Systems Auditor
    • AAIA – Advanced in AI Audit
    • CISM – Certified Information Security Manager
    • AAISM – Advanced in AI Security Management
    • CRISC – Certified in Risk and Information Systems Control
    • AAIR – Advanced in AI Risk
    • CCOA – Certified Cybersecurity Operations Analyst
    • CGEIT – Certified in the Governance of Enterprise IT
    • CDPSE – Certified Data Privacy Solutions Engineer
    • CCA – CMMC Certified Assessor
    • CCI – CMMC Certified Instructor
    • CCP – CMMC Certified Professional
    • LCCA – Lead CMMC Certified Assessor Designation
    • ITCA
    • CET – Certified in Emerging Technology Certification
    • CSX-P – CSX Cybersecurity Practitioner Certification
  • Certificates
    • AI Fundamentals
    • Blockchain Fundamentals
    • Cloud Fundamentals
    • COBIT 19 Foundation
    • COBIT 2019 Design & Implementation
    • COBIT 5 Certificates
    • Cybersecurity Audit
    • Cybersecurity Fundamentals
    • Data Science Fundamentals
    • Digital Trust Ecosystem Framework Foundation Certificate
    • IoT Fundamentals
    • IT Audit Fundamentals
    • IT Risk Fundamentals
How can we help?
  • Find the right certification
  • Navigate Career Journey
  • Maintain or renew a certification
  • Verify a certification
  • Find the right certification
  • Navigate Career Journey
  • Maintain or renew a certification
  • Verify a certification
Trusted Partner for the DoW's CMMC ProgramISACA now serves as the official CAICO.
  • About Membership
    • Member Benefits
    • Membership Types
    • Browse Chapters
  • Get Involved
    • Advocacy
    • Author an Article
    • Chapter Events Calendar
    • ISACA Awards
    • SheLeadsTech
    • Volunteer
  • Maximize Your Membership
    • Career Center
    • Discounts & Savings
    • Free CPE
    • Free Resources
    • Member Experience Leadership Series
    • Mentorship
  • Engage Online Community
What would you like to do?
  • Join today
  • Earn free CPE
  • Browse chapters
  • Volunteer
  • Join today
  • Earn free CPE
  • Browse chapters
  • Volunteer
Personalize your ExperienceUpdate your ISACA profile today.
  • AI Solution
    • CMMI Artificial Intelligence Maturity (AIM)
  • Performance Improvement Solutions
    • CMMI Performance Solutions
    • CMMI Cybermaturity Assessment Platform
    • Medical Device Program
  • CMMI Appraisal Results
  • Team Training
    • Skills and Credentials
    • CMMI Training and Certification
  • License Enterprise Training
  • Enterprise Support
  • Contact Us
Empower Your Team to Empower Business GrowthCustomize your IT team training with ISACA.
  • Become a Partner
    • Accredited Training Organization
    • CMMI Partner
    • Academic Partner
    • CMMC Approved Training Provider (ATP)
    • Sponsor
    • Global Sponsors
  • Become an Enterprise Practitioner
    • Medical Device Appraiser
    • CMMC Certified Assessor (CCA)
    • CMMC Credentialed Instructor (CCI)
    • CMMI Certified Individual
Need to find a training partner
  • Certification Training Partners
  • COBIT Training Partners
  • Academic & Workforce Partners
  • CMMI Performance Improvement Partners
  • Certification Training Partners
  • COBIT Training Partners
  • Academic & Workforce Partners
  • CMMI Performance Improvement Partners
Over 100,000 People Were Trained By ISACA in 2022Become a Partner to capitalize on this demand.
  • Conferences
    • GRC Conference
    • ISACA Europe Conference
    • ISACA North America Conference
    • ISACA Virtual Conference
    • Student Summit
    • CMMI's Capability Creates
    • Call for Speakers
  • Training Week
  • Virtual Workshops
  • Training by Type
    • Virtual Summits
    • Webinars
    • Online Review Courses
    • Session Recordings
  • Training from an Accredited Partner
  • Training by Topic
    • All Training Topics
    • Artificial Intelligence
    • Cybersecurity
    • IT Audit
    • Certification Exam Preperation
    • Cobit
What would you like to do?
  • Earn CPE
  • Find Team Training
  • Explore Virtual Workshops
  • Find Chapter Events
  • Earn CPE
  • Find Team Training
  • Explore Virtual Workshops
  • Find Chapter Events
Featured Training15% Off AI Fundamentals Online Review Course
  • ISACA Resources
    • Digital Trust
    • ISACA Journal
    • Frameworks, Standards & Models
    • Insights & Expertise
    • ISACA Podcast
    • Videos
    • News & Trends
    • ISACA Now Blog
  • Engage Online Communities
  • COBIT
  • Resources by Topic
    • Artificial Intelligence
    • Cybersecurity
    • Emerging Technology
    • Governance
    • IT Audit
    • IT Risk
    • Privacy
  • Glossary
What can we help you find?
  • ISACA Now Blog
  • White Papers
  • Audit Programs
  • ISACA Now Blog
  • White Papers
  • Audit Programs
ISACA's IT Audit FrameworkThe newest edition is now available.
ISACA logo

1700 E. Golf Road, Suite 400, Schaumburg, Illinois 60173, USA  |  +1-847-660-5505

  • LinkedIn
  • Facebook
  • Instagram
  • YouTube
  • Support
    • Contact Us
    • Fraud Reporting
    • Bug Reporting
  • Careers
    • Career Journey
    • Career Center
    • Careers at ISACA
  • About Us
    • Who We Are
    • Newsroom
    • Participate & Volunteer
    • Leadership & Governance
    • Advocacy
    • ISACA Foundation
    • Code of Professional Ethics
  • Join / Renew
    • Renew
    • Professionals
    • Recent Graduates
    • Students
  • Credentialing
  • Membership
  • Enterprise
  • Partnerships
  • Training & Events
  • Resources
  • Bug Reporting
  • Contact Us
  • Terms
  • Privacy
  • Cookie Notice
  • Fraud Reporting

©2026 ISACA. All rights reserved.

Managing Enterprise Access Risk in a Multi-Application World

Managing Enterprise Access Risk in a Multi-Application World

1 CPE
Access until 16 Apr 2027
Online•English

Description: Access risk and control models designed for single ERP environments no longer reflect how modern enterprises operate at scale. As organizations expand across procurement, HR, finance, and other line-of-business applications, access governance becomes distributed, business-owned, and increasingly complex. This session examines how enterprise-wide access risk evolves across ERP and critical business systems in real-world operating environments, and why traditional controls such as segregation of duties, user access reviews, and privileged access processes struggle to keep pace. Attendees will gain insight into how access governance must adapt to support modern governance and assurance expectations across the enterprise. Speaker: Susan Stapleton, Vice President, Customer Advisory, GRC Expert Access until: 12:00 pm CT on 16 April 2027

No image available

About this Webinar

Description:

Access risk and control models designed for single ERP environments no longer reflect how modern enterprises operate at scale. As organizations expand across procurement, HR, finance, and other line-of-business applications, access governance becomes distributed, business-owned, and increasingly complex. This session examines how enterprise-wide access risk evolves across ERP and critical business systems in real-world operating environments, and why traditional controls such as segregation of duties, user access reviews, and privileged access processes struggle to keep pace. Attendees will gain insight into how access governance must adapt to support modern governance and assurance expectations across the enterprise.


Speaker: Susan Stapleton, Vice President, Customer Advisory, GRC Expert


Access until: 12:00 pm CT on 16 April 2027

Product SKU
LMS-SW041626
Non-members
US$75
OR
Members
FREE
+ membership fees
Save US$75
  • Earn 70+ FREE CPE credits a year
  • Gain exclusive access to job postings
  • Access the online ISACA Journal
Description: Access risk and control models designed for single ERP environments no longer reflect how modern enterprises operate at scale. As organizations expand across procurement, HR, finance, and other line-of-business applications, access governance becomes distributed, business-owned, and increasingly complex. This session examines how enterprise-wide access risk evolves across ERP and critical business systems in real-world operating environments, and why traditional controls such as segregation of duties, user access reviews, and privileged access processes struggle to keep pace. Attendees will gain insight into how access governance must adapt to support modern governance and assurance expectations across the enterprise. Speaker: Susan Stapleton, Vice President, Customer Advisory, GRC Expert Access until: 12:00 pm CT on 16 April 2027
Pathlock

You might also like

No image available
AI & Enterprise Risk Management

Description: This webinar is ideal for IT leaders and risk management professionals who are eager to revolutionize their enterprise security strategies with cutting-edge AI tools from Cyberhaven, ensuring robust data protection and streamlined compliance processes. Transform your enterprise risk management strategy with AI-powered solutions that enhance data security, automate compliance, and protect sensitive information. Discover how Cyberhaven can help you streamline risk detection and response while ensuring regulatory compliance in an increasingly complex digital landscape. After attending this webinar, attendees will be able to: Unlock AI-Driven Risk Insights Discover hidden risks with advanced AI insights Gain clarity on data movements through AI analysis Learn predictive risk assessment via AI-driven tools Boost Compliance & Data Security Ensure compliance with automated oversight tools Secure sensitive data through automated protection Simplify audits by automating compliance checks Streamline Risk Detection & Response Accelerate threat detection with AI-driven responses Reduce response time with seamless identification Enhance security posture with quick, actionable insights Don't miss out on this exclusive opportunity to gain complementary access to game-changing insights on AI and enterprise risk management—available on your schedule, anytime. Sign up now to stay ahead of the curve and revolutionize your risk management strategy with Cyberhaven's leading experts. Speaker: Dan Walsh, Chief Information Security Officer, Datavant Access until: 12 pm CT on 1 February 2027

Members
FREE
Non-members
$75
No image available
Managing Cyber Risk in the New Age of AI

Description: If creating a policy is your solution for managing AI Risk, you are steaming full speed ahead… on the Titanic. AI is here to stay because it makes business sense—risk and cyber professionals must navigate its risks to realize its rewards. Join cyber risk leader Randy Lindberg as he explores how AI Risk impacts Governance, Risk, Compliance, Vendor Security, and Incident Response. Join the webinar to learn about: • New risks introduced by AI • New controls to mitigate AI risks • The need for continuous monitoring • How NIST AI RMF relates to Cyber Risk • A comprehensive AI Risk Management Model Speaker: Randy Lindberg, MBA, CISSP, CRISC, CISM, Founder and CEO, Rivial Data Security Archived until: 12:00PM CT on 2 October 2026

Members
FREE
Non-members
$75
No image available
Multi-AI Security Challenges: Strategies for Multi-Agent and Multi-MCP Architect

Description: The exponential growth of AI agents and MCP connectors will pose increasing challenges for cybersecurity teams as their dynamic nature can undermine past investments in security controls. Join IANS Faculty Aaron Turner for a look into how innovative cybersecurity teams are working with their AI counterparts to embrace the potential of AI while still managing risks through compensating controls. After this session, attendees will be able to: -Understand how to discover MCP instances in your environment -Design AuthN and AuthZ controls for multi-MCP architectures -Learn about basic security requirements for agent-to-agent and agent-to-MCP workflows that can be shared with developers Speaker: Aaron Turner, Faculty Member, IANS Archived until: 12:00pm CT on 1 January 2027

Members
FREE
Non-members
$75
No image available
Strategies for Auditing in the New World

Description: This webinar will be a panel discussion with Chief Audit Executive across the globe. This discussion will focus on best practices and lessons learned from 2025. The discussion will also cover strategies for creating effective audit plans for 2026 and what areas that should be considered as it relates to risk, security, and emerging technologies. Finally, the session will cover how to effectively engage with the Board of Directors. Learning Objectives: Attendees will learn the components of an effective audit plan. Attendees will gain an understanding of how to effectively engage with senior management and the board of directors to ensure alignment of critical objectives. Attendees will learn best practices for leading an audit team and real-world examples of the daily management of an audit department. Speakers: Mark P. Ruppert, CPA, CIA, CISA, Chief Auditor, Northern Arizona University; Robert Clark Jr., Chief Audit & Compliance Officer, Howard University; Ram Vijayanathan, CISA, CIA, Vice President of Internal Audit, Pinterest, Inc.; and Robert Findlay, CGEIT, Global Head of IT Audit, Glanbia Access until: 12 pm CT on 15 January 2027

Members
FREE
Non-members
$75
No image available
Building and Scaling a Modern Enterprise Risk Program

Description: In today’s hyperconnected and highly regulated landscape, security leaders are increasingly expected to own or influence broader enterprise risk management (ERM) capabilities. But what does it actually take to build a modern, scalable risk program from the ground up? This introductory masterclass is designed for CISOs and InfoSec risk professionals looking to deepen their influence across the enterprise. We'll explore the current state of ERM maturity across industries, break down the key drivers that accelerate program growth, and walk through core use cases—from risk identification and treatment to monitoring and reporting. You’ll also learn how to extend your program into adjacent areas like compliance, third-party risk, and business continuity. Through practical frameworks, foundational tools, and real-world examples, you'll leave with actionable strategies to assess where your program stands today—and what it will take to scale it for tomorrow. Speaker: Jaymin Desai, Technical Product Marketing Director, OneTrust Archived until: 12:00PM CT on 7 August 2026

Members
FREE
Non-members
$75
No image available
2025 ISACA Conferences: Risk Collection

2025 ISACA Conferences: Risk Collection

Members
$300
Non-members
$350
No image available
Ethics in Practice: Living the ISACA Code

Ethics in Practice: Living the ISACA Code Online Course

Members
$69
Non-members
$99
No image available
AI in the Global Landscape: US, EU and Charting IT Governance

Description: The integration of AI into IT governance is crucial for managing the risks, security, and ethical considerations of AI technologies, requiring enhanced practices in risk management, data governance, and compliance. In the U.S., the NIST AI Risk Management Framework provides a structured approach to managing AI risks through governance, control, and continuous evaluation, emphasizing stakeholder involvement. The EU AI Act aims to balance innovation with ethical standards, encouraging organizations to strengthen governance frameworks while impacting both EU and US businesses interacting with the EU market. Learning Objectives: Drill down in IT Governance, Challenges and the Development of new model Introduction of AI Integration in IT Governance NIST AI Risk Management Framework (RMF) – Key principles and a structured approach to managing AI risks. Europe’s Approach to AI Regulation – Creating adaptable frameworks to balance local values and global tech challenges. Implications for US Companies – Compliance requirements for US businesses operating in the EU. The Role of BODs in AI Governance Speaker: Robert Putrus, CISM, PMP, PE IT Security, Compliance, and Program Management, The Roberts Company Robert Putrus, CISM, PMP, PE, is a highly skilled senior management professional with expertise in cyber security, regulatory compliance, cyber audit and risk assessment, information technology, service management, and global transformation programs. He has been instrumental in guiding companies through pre-IPO preparations, mergers, acquisitions, divestitures, and IT turnaround projects. Robert is well-versed in regulatory standards such as CCPA, GDPR, PCI DSS, HIPAA, and others. Known for his successful leadership in diverse technology and business initiatives. He has founded companies, established professional service practices, and contributed significantly to cyber security and IT management publications. Robert holds an MBA and an M.Sc. in Computer Engineering, underscoring his comprehensive academic background and professional achievements. Archived until: 12:00pm CT on 22 July 2026

Members
FREE
Non-members
$75
No image available
CPE on Demand: IT Risk Management Essentials

IT Risk Management Essentials

Members
$50
Non-members
$65
No image available
CPE on Demand: Risk Essentials Bundle

Risk Essentials Bundle

Members
$70
Non-members
$90
No image available
The Audit Mindset: The Most Underrated Career Skill in Business

Description: Here’s the thing nobody tells you in college: audit is everywhere. It’s not just IT, or finance, or compliance. It’s a mindset. The same principles that drive IT audit—objectivity, evidence-based evaluation, and risk management—apply to every corner of an organization, from HR to operations to strategy. In this 60-minute session, ISACA and HRCP dig into how audit thinking cuts across disciplines and why it’s becoming a must-have skill in today’s workforce. You’ll see how IT audit concepts can sharpen hiring, strengthen accountability, and transform how teams assess risk and performance. This isn’t theory. It’s about learning to see systems, spot gaps, and fix what’s broken before it breaks you. And once you understand the audit mindset, you can apply it anywhere: teaching, hiring, leading, or building your own career path. Whether you’re guiding students, developing talent, or reinventing yourself, this conversation will change how you think about audit, and why it just might be the smartest skill no one’s talking about. You’ll Learn how to: -Turn audit thinking into a superpower that strengthens decision-making in HR, business, and beyond. -Show students the value of audit skills that boost employability and career confidence across industries. -Bring the audit mindset into the classroom with content derived from globally recognized audit certifications -Design transdisciplinary programs that connect audit, risk, and strategy to real-world outcomes. -Use audit credentials to fuel career pivots, helping professionals stand out and move up. Hear from industry thought leaders on the overall: -Laura Middleton | President of Human Resource Certification Preparation (HRCP) -Wesley Ladd | Associate Director at LSU Center for Internal Auditing and Cybersecurity Risk Management Speakers: Jeff Angle, Senior Director, Academic and Workforce Development, ISACA Laura Middleton, Co-Founder and CEO, HRCP, L.C. Wesley Ladd, MBA, CISA, CISSP, Associate Director, LSU Center for Internal Auditing and Cybersecurity Risk Management Archived until: 12:00 pm CT on 26 February 2027

Members
FREE
Non-members
FREE
No image available
Digital Forensics in the Boardroom: Empowering Strategic Decisions Through Incid

Digital Forensics in the Boardroom: Empowering Strategic Decisions Through Incid (Digital Forensics in the Boardroom: Empowering Strategic Decisions Through Incident Response Readiness)

Members
FREE
Non-members
$75
No image available
Audit Blind Spots in Modern Cloud: Risks Audits Keep Missing

Description: As organizations rapidly adopt cloud platforms, traditional audit approaches often fail to identify the risks that matter most. This webinar explores common audit blind spots in modern cloud environments, including misconfigurations, identity sprawl, excessive permissions, and ineffective continuous monitoring. Attendees will learn why checklist-based audits fall short in dynamic cloud environments and how leveraging Cloud Security Posture Management (CSPM) and risk-based audit techniques can significantly improve assurance. Practical examples will illustrate how auditors and risk professionals can enhance visibility, prioritize findings, and provide stronger assurance to leadership. After attending this webinar, attendees will be able to: -Identify common cloud security risks and misconfigurations that traditional audit programs frequently overlook. -Understand why periodic, point-in-time audits are insufficient for cloud environments and how continuous change introduces audit gaps. -Explain how Cloud Security Posture Management (CSPM) tools support continuous risk identification, control validation, and audit evidence collection. -Apply practical techniques to modernize cloud audit programs, aligning audit, security, and risk teams around continuous assurance. Speaker: Michael Ratemo, CISA, CRISC, CISM, CDPSE, CISSP, CCSP, GCSA, Principal Security Advisor, Cyber Security Simplified Archived until: 12:00pm CT on 17 February 2027

Members
FREE
Non-members
$75
No image available
A Smarter School of Phish: Why Phishing Still Works in 2025

Description: Despite years of investment in training and layered email security, advanced phishing continues to bypass defenses, fool users, and lead to costly breaches. Why? Because phishing isn’t just a technical problem. It’s a dynamic threat that exploits people, processes, and technology gaps across an enterprise. In this session, our threat intelligence and cybersecurity experts share insights from new research that sheds light on how phishing has evolved in 2025 and what’s coming next. They’ll break down the latest phishing tactics attackers are using to get past defenses today and reveal how well-defended organizations are also being compromised. We’ll discuss: -The top reasons phishing attacks continue to succeed across industries -How attackers are adapting to bypass technical controls and target users across new platforms -Emerging insights from upcoming threat research on phishing trends and tactics Speaker: Brette Petersen, Senior Product Marketing Manager, Email Security, Proofpoint Archived until: 12:00PM CT on 28 August 2026

Members
FREE
Non-members
$75
No image available
CPE on Demand: How to Perform a Risk Assessment

How to Perform a Risk Assessment

Members
$50
Non-members
$65
No image available
From Risk to Resilience: A Compliance-Driven Patch Strategy

Description: In this session, attendees will explore practical strategies to align IT operations with audit and risk management frameworks. Learn how to automate remediation workflows without sacrificing traceability, reduce audit fatigue with evidence-ready reporting, and avoid costly oversights through real-world examples of patching failures and their consequences. What You’ll Learn: -How patch management maps to key controls in NIST, ISO 27001, CIS, and COBIT frameworks -Practical steps to align IT operations with audit and risk oversight -Best practices for automating remediation workflows while maintaining traceability and compliance -How to reduce audit fatigue with evidence-ready reporting for patching activities -Real-world examples of how missed patches led to audit findings or security incidents—and how to avoid them Speaker: Gene Moody, Field CTO, Action1 Archived until: 12:00PM CT on 4 September 2026

Members
FREE
Non-members
$75
No image available
Europe Conference 2026

Join us in Munich 7-9 October for ISACA Europe Conference 2026.

Members
FREE
Non-members
FREE
No image available
Session Recording: Digital Trust Collection

Session Recording: Digital Trust Collection

Members
$230
Non-members
$280
No image available
Elevate Your Career

Elevate Your Career (Elevate Your Career)

Members
$75
Non-members
$75
Events
Shop AllEventsManaging Enterprise Access Risk in a Multi-Application World