ISACA logo
  • ShopCart
    0
  • Get support
  • Credentialing
  • Membership
  • Enterprise
  • Partnerships
  • Training and Events
  • Resources
Need help?Get support
©2026 ISACA. All rights reserved.
  • Certifications
    • CISA – Certified Information Systems Auditor
    • AAIA – Advanced in AI Audit
    • CISM – Certified Information Security Manager
    • AAISM – Advanced in AI Security Management
    • CRISC – Certified in Risk and Information Systems Control
    • AAIR – Advanced in AI Risk
    • CCOA – Certified Cybersecurity Operations Analyst
    • CGEIT – Certified in the Governance of Enterprise IT
    • CDPSE – Certified Data Privacy Solutions Engineer
    • CCA – CMMC Certified Assessor
    • CCI – CMMC Certified Instructor
    • CCP – CMMC Certified Professional
    • LCCA – Lead CMMC Certified Assessor Designation
    • ITCA
    • CET – Certified in Emerging Technology Certification
    • CSX-P – CSX Cybersecurity Practitioner Certification
  • Certificates
    • AI Fundamentals
    • Blockchain Fundamentals
    • Cloud Fundamentals
    • COBIT 19 Foundation
    • COBIT 2019 Design & Implementation
    • COBIT 5 Certificates
    • Cybersecurity Audit
    • Cybersecurity Fundamentals
    • Data Science Fundamentals
    • Digital Trust Ecosystem Framework Foundation Certificate
    • IoT Fundamentals
    • IT Audit Fundamentals
    • IT Risk Fundamentals
How can we help?
  • Find the right certification
  • Navigate Career Journey
  • Maintain or renew a certification
  • Verify a certification
  • Find the right certification
  • Navigate Career Journey
  • Maintain or renew a certification
  • Verify a certification
Trusted Partner for the DoW's CMMC ProgramISACA now serves as the official CAICO.
  • About Membership
    • Member Benefits
    • Membership Types
    • Browse Chapters
  • Get Involved
    • Advocacy
    • Author an Article
    • Chapter Events Calendar
    • ISACA Awards
    • SheLeadsTech
    • Volunteer
  • Maximize Your Membership
    • Career Center
    • Discounts & Savings
    • Free CPE
    • Free Resources
    • Member Experience Leadership Series
    • Mentorship
  • Engage Online Community
What would you like to do?
  • Join today
  • Earn free CPE
  • Browse chapters
  • Volunteer
  • Join today
  • Earn free CPE
  • Browse chapters
  • Volunteer
Personalize your ExperienceUpdate your ISACA profile today.
  • AI Solution
    • CMMI Artificial Intelligence Maturity (AIM)
  • Performance Improvement Solutions
    • CMMI Performance Solutions
    • CMMI Cybermaturity Assessment Platform
    • Medical Device Program
  • CMMI Appraisal Results
  • Team Training
    • Skills and Credentials
    • CMMI Training and Certification
  • License Enterprise Training
  • Enterprise Support
  • Contact Us
Empower Your Team to Empower Business GrowthCustomize your IT team training with ISACA.
  • Become a Partner
    • Accredited Training Organization
    • CMMI Partner
    • Academic Partner
    • CMMC Approved Training Provider (ATP)
    • Sponsor
    • Global Sponsors
  • Become an Enterprise Practitioner
    • Medical Device Appraiser
    • CMMC Certified Assessor (CCA)
    • CMMC Credentialed Instructor (CCI)
    • CMMI Certified Individual
Need to find a training partner
  • Certification Training Partners
  • COBIT Training Partners
  • Academic & Workforce Partners
  • CMMI Performance Improvement Partners
  • Certification Training Partners
  • COBIT Training Partners
  • Academic & Workforce Partners
  • CMMI Performance Improvement Partners
Over 100,000 People Were Trained By ISACA in 2022Become a Partner to capitalize on this demand.
  • Conferences
    • GRC Conference
    • ISACA Europe Conference
    • ISACA North America Conference
    • ISACA Virtual Conference
    • Student Summit
    • CMMI's Capability Creates
    • Call for Speakers
  • Training Week
  • Virtual Workshops
  • Training by Type
    • Virtual Summits
    • Webinars
    • Online Review Courses
    • Session Recordings
  • Training from an Accredited Partner
  • Training by Topic
    • All Training Topics
    • Artificial Intelligence
    • Cybersecurity
    • IT Audit
    • Certification Exam Preperation
    • Cobit
What would you like to do?
  • Earn CPE
  • Find Team Training
  • Explore Virtual Workshops
  • Find Chapter Events
  • Earn CPE
  • Find Team Training
  • Explore Virtual Workshops
  • Find Chapter Events
Featured Training15% Off AI Fundamentals Online Review Course
  • ISACA Resources
    • Digital Trust
    • ISACA Journal
    • Frameworks, Standards & Models
    • Insights & Expertise
    • ISACA Podcast
    • Videos
    • News & Trends
    • ISACA Now Blog
  • Engage Online Communities
  • COBIT
  • Resources by Topic
    • Artificial Intelligence
    • Cybersecurity
    • Emerging Technology
    • Governance
    • IT Audit
    • IT Risk
    • Privacy
  • Glossary
What can we help you find?
  • ISACA Now Blog
  • White Papers
  • Audit Programs
  • ISACA Now Blog
  • White Papers
  • Audit Programs
ISACA's IT Audit FrameworkThe newest edition is now available.
ISACA logo

1700 E. Golf Road, Suite 400, Schaumburg, Illinois 60173, USA  |  +1-847-660-5505

  • LinkedIn
  • Facebook
  • Instagram
  • YouTube
  • Support
    • Contact Us
    • Fraud Reporting
    • Bug Reporting
  • Careers
    • Career Journey
    • Career Center
    • Careers at ISACA
  • About Us
    • Who We Are
    • Newsroom
    • Participate & Volunteer
    • Leadership & Governance
    • Advocacy
    • ISACA Foundation
    • Code of Professional Ethics
  • Join / Renew
    • Renew
    • Professionals
    • Recent Graduates
    • Students
  • Credentialing
  • Membership
  • Enterprise
  • Partnerships
  • Training & Events
  • Resources
  • Bug Reporting
  • Contact Us
  • Terms
  • Privacy
  • Cookie Notice
  • Fraud Reporting

©2026 ISACA. All rights reserved.

People-Centered Security: Using ADKAR to Build Resilience

People-Centered Security: Using ADKAR to Build Resilience

1 CPE
Online•English

People-Centered Security: Using ADKAR to Build Resilience (People-Centered Security: Using ADKAR to Build Resilience)

No image available

About this Webinar

Security programs fail when people don’t adopt them. This session shows how to strengthen organizational security by translating the PROSCI ADKAR model into measurable implementation outcomes. Participants will explore how structured behavior-based change can close gaps in control execution, reduce risk, and accelerate program maturity. The session includes case studies of organizational change management (OCM) in real-world security environments, highlights metrics that matter, and offers practical tools for reducing resistance. Grounded in CISM-aligned practices and framed for practitioners who deliver results, this session bridges theory and action—without jargon, fluff, or silver bullets.

Learning Objectives: 

  • Translate each stage of ADKAR into security-specific outcomes and actions.
  • Identify and mitigate common pitfalls in OCM implementation for security programs.
  • Apply metrics to track behavior-based adoption and program impact.
  • Use real-world case insights to reduce resistance and boost security control adoption.


Melanie Wijeratna, CISM, PROSCI

Owner, Blue Star Ink

Melanie Wijeratna is a storyteller, strategist, and security leader who has built a career around creative thinking and resilience. With three degrees from the University of Toronto and a background in semiotics, linguistics, anthropology, and organizational change management, she helps organizations navigate complexity with clarity and courage. As the owner of Blue Star Ink, she works with companies to tackle human behavior gaps in cybersecurity. Known for her dynamic sessions and real-world insights, Melanie blends technical understanding with people-first strategies—always exploring new paths, asking new questions, and looking beyond the obvious.

Product SKU
LMS-W071025
Non-members
US$75
OR
Members
FREE
+ membership fees
Save US$75
  • Earn 70+ FREE CPE credits a year
  • Gain exclusive access to job postings
  • Access the online ISACA Journal

You might also like

No image available
From Risk to Resilience: A Compliance-Driven Patch Strategy

Description: In this session, attendees will explore practical strategies to align IT operations with audit and risk management frameworks. Learn how to automate remediation workflows without sacrificing traceability, reduce audit fatigue with evidence-ready reporting, and avoid costly oversights through real-world examples of patching failures and their consequences. What You’ll Learn: -How patch management maps to key controls in NIST, ISO 27001, CIS, and COBIT frameworks -Practical steps to align IT operations with audit and risk oversight -Best practices for automating remediation workflows while maintaining traceability and compliance -How to reduce audit fatigue with evidence-ready reporting for patching activities -Real-world examples of how missed patches led to audit findings or security incidents—and how to avoid them Speaker: Gene Moody, Field CTO, Action1 Archived until: 12:00PM CT on 4 September 2026

Members
FREE
Non-members
$75
No image available
Digital Resilience: Building Stronger, Smarter Organizations

Description: In an era of unrelenting technological disruption—where cyberattacks, AI-driven risks, and digital transformations collide—resilience is no longer a luxury; it’s a strategic imperative. This session will explore how organizations can build digital resilience, leveraging technology not just to survive disruptions but to emerge stronger and more adaptive. We’ll dive into: • What digital resilience really means, and how it extends beyond traditional business continuity. • How AI, automation, cloud, and other emerging technologies can both create risks and enable resilience. • Proven frameworks for integrating resilience into IT, audit, risk management, and compliance functions. • The leadership mindsets and cross-functional strategies needed to embed resilience into the DNA of your organization. Whether you’re an IT auditor, risk professional, compliance leader, or technology executive, this session will equip you with the insights and tools to transform disruption into a strategic advantage and future-proof your organization. Speaker: Deidre Melton, CFE, CIA, CISA, CISM, CDPSE, CRISC, CRMA, CIG, CIGI Deputy Chief Operating Officer & Associate Vice President for Enterprise Risk Management (CRO) Florida Agricultural and Mechanical University Archived until: 12:00pm CT on 5 August 2026

Members
FREE
Non-members
$75
No image available
AI Security Management

Description: Artificial Intelligence (AI) is changing the security environment and the role of security managers. It is increasingly critical that security managers can identify, assess, monitor, and mitigate risk associated with enterprise AI solutions while simultaneously dealing with AI-enabled attacks. Security managers play a pivotal role in key practice areas, including: AI governance and program management; AI technologies and controls; and AI risk management. In this webinar you will learn about the critical domains and key tasks that any security manager handling AI must know. We will also provide an overview of the ISACA Advanced in AI Security Management™ (AAISM™) program; the first and only AI-centric security management certification designed to strengthen enterprise resilience and provide a competitive edge. Learning Objectives: -Understand how artificial intelligence is impacting security management -Gain understanding of the risk management lifecycle as applied to AI -Learn how the AAISM can help validate your AI security management skills Speaker: Jon Brandt, CISM, CDPSE, CCISO, CISSP, PMP, Director, Professional Practices and Innovation, ISACA Archived until: 12:00pm CT on 12 August 2026

Members
FREE
Non-members
$75
No image available
2025 ISACA Conferences: Cybersecurity/Information Security Collection

2025 ISACA Conferences: Cybersecurity/Information Security Collection

Members
$300
Non-members
$350
No image available
CPE on Demand: How to Perform a Risk Assessment

How to Perform a Risk Assessment

Members
$50
Non-members
$65
No image available
Ascending to Leadership: A 5-Step Blueprint

Description: Transitioning beyond technical specialization into organization-wide senior authority requires leveling up key emotional intelligence, collaboration, oversight and communication abilities that widen responsibility spans. This high-impact leadership workshop prepares management to broaden teams coached, leverage cross-functional partners under complex uncertainty and make decisions conferring competitive advantage. Learning Objectives: Adopt "T-shaped" skills with both broad perspective and specialized depth Building Executive Presence and Gravitas Techniques to showcase vision, empathy, confidence and decisiveness Stakeholder mapping tips to get buy-in and scale impact Coaching frameworks that develop middle managers into force multipliers Methods for data storytelling and expressing outcomes aligned to strategy The focus would be on elevating key areas like mindsets, executive persona, strategic influence, team leadership and measuring business impact required in larger management roles. Speaker: Sirisha Kuchimanchi, COO & Co-Founder, Xtrium Access until: 12 pm CT on 1 September 2027

Members
FREE
Non-members
$75
No image available
From Identity Visibility to Governance and Control

Description: Many organizations face an identity crisis—fragmented systems, manual processes, and unchecked privileges that create risk, inefficiency, and audit fatigue. But identity management doesn’t have to be complex or reactive. Join Netwrix expert Kate Fleming to learn how to turn identity chaos into clarity and control. See how automation, attestation, and delegation combine to deliver visibility, consistency, and accountability across every stage of the identity lifecycle. Walk away with practical strategies to simplify access management, strengthen governance, and give your business the agility to move faster and operate with confidence. Speaker: Kate Fleming, Senior Product Manager, Netwrix Access until: 12:00 pm CT on 2 April 2027

Members
FREE
Non-members
$75
No image available
The Perfect Storm: AI, Data Sprawl, and Security Silos

Description: As AI adoption accelerates and sensitive data spreads across SaaS and cloud environments, organizations face rising exposure risks that siloed security tools can’t manage. To safely enable AI, teams must discover where data lives, understand its value and risk, and govern how it’s accessed by both users and AI tools. Organizations need an AI-ready security approach that combines discovery, classification, and governance to protect sensitive data and enable secure use of AI assistants like Microsoft Copilot. In this 1-hour session, Proofpoint experts will cover data security gaps, the need for AI-powered classification and governance, and practical steps to become AI-ready. Speakers: Itir Clarke, Staff Product Marketing Manager, Proofpoint Josh Linkenhoker, Enterprise Security Advisor, Proofpoint Archived until: 12:00PM CT on 26 March 2027

Members
FREE
Non-members
$75
No image available
Multi-AI Security Challenges: Strategies for Multi-Agent and Multi-MCP Architect

Description: The exponential growth of AI agents and MCP connectors will pose increasing challenges for cybersecurity teams as their dynamic nature can undermine past investments in security controls. Join IANS Faculty Aaron Turner for a look into how innovative cybersecurity teams are working with their AI counterparts to embrace the potential of AI while still managing risks through compensating controls. After this session, attendees will be able to: -Understand how to discover MCP instances in your environment -Design AuthN and AuthZ controls for multi-MCP architectures -Learn about basic security requirements for agent-to-agent and agent-to-MCP workflows that can be shared with developers Speaker: Aaron Turner, Faculty Member, IANS Archived until: 12:00pm CT on 1 January 2027

Members
FREE
Non-members
$75
No image available
Session Recording: Digital Trust Collection

Session Recording: Digital Trust Collection

Members
$230
Non-members
$280
No image available
Elevate Your Career

Elevate Your Career (Elevate Your Career)

Members
$75
Non-members
$75
No image available
ISACA Virtual Conference Session Recording : EMEA Collection

ISACA Virtual Conference Session Recording : EMEA Collection

Members
$650
Non-members
$700
No image available
Managing Enterprise Access Risk in a Multi-Application World

Description: Access risk and control models designed for single ERP environments no longer reflect how modern enterprises operate at scale. As organizations expand across procurement, HR, finance, and other line-of-business applications, access governance becomes distributed, business-owned, and increasingly complex. This session examines how enterprise-wide access risk evolves across ERP and critical business systems in real-world operating environments, and why traditional controls such as segregation of duties, user access reviews, and privileged access processes struggle to keep pace. Attendees will gain insight into how access governance must adapt to support modern governance and assurance expectations across the enterprise. Speaker: Susan Stapleton, Vice President, Customer Advisory, GRC Expert Access until: 12:00 pm CT on 16 April 2027

Members
FREE
Non-members
$75
No image available
Get Off the Assessment Treadmill. Take a Data-First, Questionnaire-Second Approa

Description: The work never ends. Every year, we onboard more third parties. And every year, our assessment workload gets worse. More resources to help? Not going to happen. Sound familiar? You’re not alone. We have been at this process for years, but it continues to get worse for your team and the people in your company that rely on your third parties. It doesn't have to be that way. The newest risk exchange models are eliminating 80% of questionnaire requests with data. This webinar will outline how to: -Instantly perform inherent risk analysis on your entire vendor portfolio -Incorporate real-time risk [CM1] data into your process to reduce [CM2] questionnaire requests -Map your questionnaire and controls to industry-standard [CM3] frameworks or threat profiles to get the information you need with fewer questions -Access [CM4] assessment data on large, hard-to-assess third parties that don't respond to you -Monitor 100% of your portfolio -- not just your critical vendors Join this webinar and start your program's evolution. Speaker: Ed Thomas, Senior Vice President, ProcessUnity Archive Until: 12:00pm CT on 24 July 2026

Members
FREE
Non-members
$75
No image available
2026 Virtual Conference

Join us for the 2026 ISACA Virtual Conference. Choose a 19.5 CPE Global Pass for all regions/all days or a 6.5 CPE One-Day Pass for one region/one day.

Members
FREE
Non-members
FREE
No image available
Mastering the Art of Cyberthreat Defense with IAM & SIEM

Description: In today’s hybrid IT world, identity is the new perimeter—and attackers know it. This session explores how converged Identity and Access Management (IAM) and Security Information and Event Management (SIEM) strategies help detect, defend, and recover from modern cyberthreats. Learn practical approaches to identity-first security, threat analytics, and compliance management, using real-world use cases from enterprises adopting Zero Trust and behavior-based threat defense models. Speaker: Ranjith Kumar, Lead - Technical Consultant, ManageEngine Archived until: 12:00PM CT on 14 August 2026

Members
FREE
Non-members
$75
No image available
Cyber, Cloud, Compliance and AI

Description: Our international panel will examine some of the key questions organizations face regarding cybersecurity breaches, cloud computing, compliance, privacy (including GDPR), and AI. How will AI help identify data breach risks? How will cloud issues affect AI? How will AI impact compliance and privacy requirements? After attending this webinar, attendees will able to answer the following questions: -Where does AI contribute to cybersecurity, such as in threat intelligence production and enrichment? Threat intelligence consumption? AI and compliance efforts? Also, where does AI play a role in risk identification, risk mitigation, and breach detection? Cybersecurity is a growing concern, with third-party vendors responsible for 63% of data breaches. What are the main challenges in today’s changing cyber landscape? -How can businesses manage cyber risks posed by third-party vendors? How can AI models be responsibly trained and validated using datasets correctly classified by sensitivity levels—such as Public, Private, Confidential, Secret, and Restricted—and what technical and procedural safeguards ensure that misclassified or mislabeled data does not inadvertently expose sensitive or protected information during processing, storage, or model inference? -When combining data from multiple sources for AI model training, what technical controls, governance frameworks, and validation processes are in place to ensure secure data integration that: Prevents data leakage and unauthorized access, maintains data integrity across systems, Furthermore, does it adhere to regulatory and compliance obligations such as HIPAA, GDPR, FISMA, FedRAMP, CCPA, NYDPA, SOX, GLBA, FERPA, DoD Cybersecurity Maturity Model Certification (CMMC), and other applicable state, federal, and industry-specific standards? How are these mechanisms evaluated and updated as data sources or AI models evolve? -What are the ethical and security concerns of using AI-generated synthetic data instead of real-world data, and how can organizations ensure that fabricated data doesn't inadvertently resemble or expose real individuals' identities? Speakers: Ulf Mattsson, CTO, UlfMattsson.com John C. Checco, DSc. C|CISO, CISSP, CCSK, Board Certified QTE, Chapter President, ISSA NY Metro Ariel Evans, CEO and Co-Founder, RiskQ Inc. Dr. Daniel O’Connell, EdD, MS, CDPSE, ITIL, HDPCA, Principal/Founder & CEO, DocLogical, LLC & Quinnipiac University Claude Baudoin, Co-Chair, Owner and Principal Consultant, OMG Cloud Working Group, cébé IT & Knowledge Management Archived until: 12:00pm CT on 3 March 2027

Members
FREE
Non-members
$75
No image available
Beyond Content Inspection: Modern DLP for AI

Description: Content based DLP controls were designed for an era where sensitive data stayed inside files and followed predictable workflows. In today’s AI enabled enterprise, data fragments, recombines, and moves across endpoints, browsers, cloud applications, and generative AI tools, often without clear policy signals. This webinar explains why content inspection alone provides an incomplete view of data risk and how organizations can enhance DLP using contextual intelligence such as data lineage, behavioral analytics, and AI assisted investigations. Attendees will learn how modern approaches improve detection accuracy, reduce false positives, and support compliance, insider risk management, and AI governance. Speaker: Cole Padula, Solutions Engineer, Cyberhaven Access until: 12 pm CT on 5 March 2027

Members
FREE
Non-members
$75
Events
Shop AllEventsPeople-Centered Security: Using ADKAR to Build Resilience