New Perspectives.
Greater Impact.
Connect, learn and expand your insights with fellow IS/IT professionals in the Windy City.
-
Overview
- Pricing
-
Plan Your Event
- PLAN YOUR EVENT
- Sponsors
Pre-Conference Workshops
WORKSHOP 1: CMMI Building Artificial Intelligence Maturity (BAIM)
PREREQUISITE: You must hold a current CMMI Practitioner Certification before attending BAIM class orientation session. New to CMMI? Plan to complete the three-day Building Organizational Capability (BOC) course and pass the CMMI Practitioner exam before enrolling in BAIM.
Build on your CMMI knowledge to apply AI best practices that strengthen competitive advantage, support revenue growth, and improve organizational performance.
After this workshop, attendees will be able to:
- Integrate AI best practices into business processes and workflows to drive valuable business outcomes.
- Strengthen governance, oversight, delivery, management, and quality across AI initiatives.
- Address business, social, environmental, and ethical AI risks, challenges, and impacts.
- Get a free one-year access to CMMI model content through our innovative Model Viewer Plus tool.
The course also prepares participants for the CMMI AIM Practitioner exam (included). Completing the course and passing the exam fulfills key certification requirements for participating as an Appraisal Team Member on CMMI AIM appraisals and applying for CMMI AIM Lead Appraiser Training.
Required BAIM pre-course eLearning must also be completed before attending.
WORKSHOP 2: Assessing AI Risk: Identifying, Evaluating, and Managing Risks Across the AI Lifecycle
As organizations increasingly integrate AI into business processes, products, and decision-making, understanding and managing AI-related risks has become a critical business capability. This one-day workshop provides a practical framework for assessing AI risks across technology, operations, compliance, security, ethics, and governance domains. Participants will learn how to identify potential AI risks, evaluate their likelihood and impact, apply risk assessment methodologies, and develop effective mitigation strategies that support responsible and trustworthy AI adoption.
After this workshop, attendees will be able to:
- Identify AI Risk Categories and Sources
- Recognize key AI risks, including security, privacy, bias, fairness, transparency, operational, legal, regulatory, and reputational risks across the AI lifecycle.
- Conduct Structured AI Risk Assessments
- Apply proven risk assessment methodologies to evaluate the likelihood, impact, and business significance of AI-related threats, vulnerabilities, and unintended outcomes.
- Develop Risk Mitigation and Governance Strategies
- Design risk treatment plans that incorporate technical controls, organizational policies, oversight mechanisms, and ongoing monitoring to support responsible AI deployment and use.
WORKSHOP 3: Auditing Emerging Technologies: Evaluating Risk, Governance, and Control Effectiveness in a Rapidly Evolving Landscape
Emerging Technologies continues to transform organizations resulting in new opportunities and risks. This one-day workshop equips auditors, with practical approaches to assessing emerging technology environments. Participants will learn how to evaluate governance structures, identify technology-related risk, assess control effectiveness, and provide meaningful assurance in areas where standards, regulations, and best practices continue to evolve.
After this workshop, attendees will be able to:
- Identify Risks Associated with Emerging Technologies
- Recognize operational, cybersecurity, privacy, regulatory, ethical, and third-party risks introduced by emerging technologies and digital transformation initiatives.
- Apply Audit Methodologies to Emerging Technology Environments
- Develop risk-based audit approaches for assessing governance, controls, data integrity, security, resilience, and compliance across emerging technology implementations.
- Evaluate Governance and Control Effectiveness
- Assess whether organizational policies, oversight structures, monitoring mechanisms, and risk management practices adequately support the responsible adoption and operation of emerging technologies.
WORKSHOP 4: AI Security Management: Bridging Technical Controls and Leadership Governance for Trusted AI
As organizations rapidly adopt AI technologies, security leaders, IT professionals, risk managers, and business executives must work together to manage risk while enabling innovation. This intensive one-day workshop provides a holistic overview of AI security management, combining technical security concepts with governance, risk, compliance, and leadership practices. Participants will gain an understanding of the AI threat landscape, secure AI system design, data protection, model vulnerabilities, regulatory considerations, and organizational governance frameworks.
After this workshop, attendees will be able to:
- Assess AI Security Risks
- Identify and evaluate AI-specific threats, vulnerabilities, and attack vectors
- Implement AI Security Governance and Controls
- Apply security, risk management, privacy, compliance, and governance frameworks to establish effective policies, controls, and accountability for AI systems across the organization.
- Develop a Cross-Functional AI Security Strategy
- Create an integrated AI security management approach that aligns technical safeguards, business objectives, regulatory requirements, and organizational risk tolerance throughout the AI lifecycle.
ISACA 2027 North America Conference
FORMAT
Tuesday, 04 May 2027
Workshop
WS1: CMMI Building Artificial Intelligence Maturity (BAIM)
Workshop
WS2: Assessing AI Risk: Identifying, Evaluating, and Managing Risks Across the AI Lifecycle
Workshop
WS3: Auditing Emerging Technologies: Evaluating Risk, Governance, and Control Effectiveness in a Rapidly Evolving Landscape
Workshop
WS4: AI Security Management: Bridging Technical Controls and Leadership Governance for Trusted AI
Welcome Reception
PS1: More Information Coming Soon
PS2: More Information Coming Soon
PS3: More Information Coming Soon
Wednesday, 05 May 2027
Wednesday Breakfast and Networking
General Session
GS1: Opening General Session and Keynote
Speaker(s): Melissa Valentine
PS4: More Information Coming Soon
111: Decoding NIST SP 800-171r3, Foundation for CMMC
121: More Information Coming Soon
131: Before You Buy the Breach: Cybersecurity Lessons for M&A
141: Beyond the Badge: Driving Measurable Value and Global Process Improvement with CMMI
151: Privacy Is Everyone's Problem: What Security, Risk and Audit Need to Know
161: More Information Coming Soon
KS1: More Information Coming Soon
KS2: More Information Coming Soon
KS3: More Information Coming Soon
KS4: More Information Coming Soon
KS5: More Information Coming Soon
KS6: More Information Coming Soon
Wednesday Lunch
PS5: More Information Coming Soon
PS6: More Information Coming Soon
112: Achieving High Maturity in the Age of AI
122: More Information Coming Soon
132: Building a Security Program from Zero
142: AI First, Human Accountable: Redefining Leadership, Decision-Making and Enterprise Risk
152: Beyond the Core: Quantitative and Statistical Methods for High Maturity Across Security, Data, PPL
162: More Information Coming Soon
113: From Burnout to Capability: Fixing Internal Audit at Scale
123: More Information Coming Soon
133: Quantum-Ready or Quantum-Vulnerable? A Practical Risk Framework for Securing Enterprise AI Systems
143: The Human Audit: Redesigning Enterprise Resilience through the Architecture of Reconnection
153: The Changed Landscape of High Maturity Implementation - Some Perspectives
163: More Information Coming Soon
PS7: More Information Coming Soon
114: Implementing a Mature AI-Driven Document Processing Solution:An Enterprise Transformation Journey
124: GRACE - The Governance, Risk & Assurance Capability Ecosystem
134: Beyond Compliance: Building Enterprise Capability Through Security Frameworks
144: Engineering Continuous CMMC Readiness: Moving Beyond Point-in-Time Compliance
154: How 2026 AI Budgets Broke and Why Nobody Saw It Coming
164: More Information Coming Soon
Thursday, 06 May 2027
Thursday Breakfast and Networking
PS8: More Information Coming Soon
General Session
GS2: Thursday General Session
Speaker(s): Sabrina Shafer
PS9: More Information Coming Soon
211: From CMMI Maturity to AI-Enabled Delivery Risk Intelligence
221: More Information Coming Soon
231: The First 72 Hours: Privacy Counsel's Playbook for Data Breach Response
241: Quantum-Safe or Quantum-Washed? Auditing PQC Claims in the 2028 Enterprise
251: Hackers Are From Mars, Executives Are From Venus
261: More Information Coming Soon
212: The Human Control Plane: Why AI Governance Fails Before the Model Fails.
222: One World, Many Rulebooks: A Practitioner's Method for Harmonizing Global Privacy Regulations
232: Building Better Security Through Better Compliance
242: The Hidden Liability
252: When Every Minute Counts: Communication Strategies for Cyber Incident Response
262: More Information Coming Soon
Thursday Lunch
PS10: More Information Coming Soon
PS11: More Information Coming Soon
213: Beyond the Vendor: Governing Fourth-, Fifth-, and Nth-Party Risk at Enterprise Scale
223: More Information Coming Soon
233: Beyond the Prompt: A Practical Guide to Auditing Agentic AI
243: Communicating with Confidence: The Leadership Skill That Builds Trust and Drives Results
253: There Is Not Much “Third” Left in Third-Party Risk
263: More Information Coming Soon
PS12: More Information Coming Soon
KS7: More Information Coming Soon
KS8: More Information Coming Soon
KS9: More Information Coming Soon
KS10: More Information Coming Soon
KS11: More Information Coming Soon
KS12: More Information Coming Soon
PS13: More Information Coming Soon
214: How Software Defined Vehicles and Information Security intersect to Allow Innovative Solutions
224: Beyond Compliance: Better Conversations. Better Decisions.
234: Quantifying the Black Box: A FAIR-CAM Approach to AI Agent Risk
244: Recalibrate Your Thinking: Overcoming Bias to Build Proactive, Trust-Centered Security Programs
254: Shadow Delegation: Auditing the Authority Nobody Signed For
264: More Information Coming Soon
Awards & Social Event
Friday, 07 May 2027
Friday Breakfast and Networking
311: Social Media - Have We Lost Control?
321: Before Q-Day: A Practical Roadmap to Post Quantum Cryptography
331: Leading Teams in an AI-Driven World: Building Trust, Skills, and Accountability
341: The Mythical Division Between Business Continuity and Technical Recovery
351: Privacy at Sea: Regulating High‑Mobility, High‑Volume Guest Data in a Global Hospitality Network
361: More Information Coming Soon
312: Leading Responsibly with EI: Building Compliance Trust in the AI Era
322: Judgment Sold Separately: Agents, Algorithms, and Accountability
332: From Checklist Audits to Digital Trust Assurance
342: Ensure and Improve AI-Generated Code Security with Deterministic Network Response Comparisons
352: From Framework to Factory Floor: Using NIST CSF and ISA/IEC 62443 to Achieve Operationally Practical
362: More Information Coming Soon
General Session
GS3: Closing General Session and Keynote
Speaker(s): Suneel Gupta
Wednesday, 05 May 2027
General Session
GS1: Opening General Session and Keynote
Speaker(s): Melissa Valentine
111: Decoding NIST SP 800-171r3, Foundation for CMMC
121: More Information Coming Soon
131: Before You Buy the Breach: Cybersecurity Lessons for M&A
141: Beyond the Badge: Driving Measurable Value and Global Process Improvement with CMMI
151: Privacy Is Everyone's Problem: What Security, Risk and Audit Need to Know
KS1: More Information Coming Soon
KS2: More Information Coming Soon
KS3: More Information Coming Soon
KS4: More Information Coming Soon
KS5: More Information Coming Soon
112: Achieving High Maturity in the Age of AI
122: More Information Coming Soon
132: Building a Security Program from Zero
142: AI First, Human Accountable: Redefining Leadership, Decision-Making and Enterprise Risk
152: Beyond the Core: Quantitative and Statistical Methods for High Maturity Across Security, Data, PPL
113: From Burnout to Capability: Fixing Internal Audit at Scale
123: More Information Coming Soon
133: Quantum-Ready or Quantum-Vulnerable? A Practical Risk Framework for Securing Enterprise AI Systems
143: The Human Audit: Redesigning Enterprise Resilience through the Architecture of Reconnection
153: The Changed Landscape of High Maturity Implementation - Some Perspectives
114: Implementing a Mature AI-Driven Document Processing Solution:An Enterprise Transformation Journey
124: GRACE - The Governance, Risk & Assurance Capability Ecosystem
134: Beyond Compliance: Building Enterprise Capability Through Security Frameworks
144: Engineering Continuous CMMC Readiness: Moving Beyond Point-in-Time Compliance
154: How 2026 AI Budgets Broke and Why Nobody Saw It Coming
Thursday, 06 May 2027
General Session
GS2: Thursday General Session
Speaker(s): Sabrina Shafer
211: From CMMI Maturity to AI-Enabled Delivery Risk Intelligence
221: More Information Coming Soon
231: The First 72 Hours: Privacy Counsel's Playbook for Data Breach Response
241: Quantum-Safe or Quantum-Washed? Auditing PQC Claims in the 2028 Enterprise
251: Hackers Are From Mars, Executives Are From Venus
212: The Human Control Plane: Why AI Governance Fails Before the Model Fails.
222: One World, Many Rulebooks: A Practitioner's Method for Harmonizing Global Privacy Regulations
232: Building Better Security Through Better Compliance
242: The Hidden Liability
252: When Every Minute Counts: Communication Strategies for Cyber Incident Response
213: Beyond the Vendor: Governing Fourth-, Fifth-, and Nth-Party Risk at Enterprise Scale
223: More Information Coming Soon
233: Beyond the Prompt: A Practical Guide to Auditing Agentic AI
243: Communicating with Confidence: The Leadership Skill That Builds Trust and Drives Results
253: There Is Not Much “Third” Left in Third-Party Risk
KS7: More Information Coming Soon
KS8: More Information Coming Soon
KS9: More Information Coming Soon
KS10: More Information Coming Soon
KS11: More Information Coming Soon
214: How Software Defined Vehicles and Information Security intersect to Allow Innovative Solutions
224: Beyond Compliance: Better Conversations. Better Decisions.
234: Quantifying the Black Box: A FAIR-CAM Approach to AI Agent Risk
244: Recalibrate Your Thinking: Overcoming Bias to Build Proactive, Trust-Centered Security Programs
254: Shadow Delegation: Auditing the Authority Nobody Signed For
Friday, 07 May 2027
311: Social Media - Have We Lost Control?
321: Before Q-Day: A Practical Roadmap to Post Quantum Cryptography
331: Leading Teams in an AI-Driven World: Building Trust, Skills, and Accountability
341: The Mythical Division Between Business Continuity and Technical Recovery
351: Privacy at Sea: Regulating High‑Mobility, High‑Volume Guest Data in a Global Hospitality Network
312: Leading Responsibly with EI: Building Compliance Trust in the AI Era
322: Judgment Sold Separately: Agents, Algorithms, and Accountability
332: From Checklist Audits to Digital Trust Assurance
342: Ensure and Improve AI-Generated Code Security with Deterministic Network Response Comparisons
352: From Framework to Factory Floor: Using NIST CSF and ISA/IEC 62443 to Achieve Operationally Practical
General Session
GS3: Closing General Session and Keynote
Speaker(s): Suneel Gupta
-
Overview
- ISACA North America Conference
- Overview
- Pricing
-
Plan Your Event
- Plan Your Event
- PLAN YOUR EVENT
- Sponsors