ISACA Resources

COBIT on a computer screen

COBIT

Explore the globally recognized framework for the governance of enterprise IT.

LEARN MORE
Illustration representing trends

Insights and expertise

Gain insights and grow your know-how with expert-developed white papers, discussions, programs and tools.

LEARN MORE
Illustration of gear icon with a hexagon around it

Frameworks, standards and models

Use the right frameworks to add value to your role and enterprise.

LEARN MORE
ISACA Journal

ISACA Journal

Read through peer-reviewed, in-depth articles on pressing industry topics.

LEARN MORE
Illustration of a news article

News and trends

Blogs, Podcast and Newsletters. Explore the latest on industry standards, best practices and emerging trends.

LEARN MORE
Illustration of globe with people in it

Engage online communities

Network, learn, and discuss relevant business topics and best practices with colleagues around the world.

LEARN MORE

Featured Resources

ISACA Journal Article

Untangling the Supply Chain Web With ISO 27001

Enterprises are growing more concerned that they might be attacked via their supply chain.

Author: Hannah Hunt
White Paper

Understanding the EU AI Act: Requirements and Next Steps

The rapid growth in the use of artificial intelligence (AI) technologies, especially generative AI (genAI), is driven by the myriad benefits these technologies are purported to provide.
ISACA Journal Article

Addressing Security Concerns in a Mobile Computing Environment

Given the sensitive nature of information stored on mobile devices, the consequences of a breach can be severe.

Author: Rachit Gupta
ISACA Journal Article

Collaborative Cybersecurity: Unifying Functions for a Secure Future

The complexity of cyberthreats often mirrors the fragmentation within a cybersecurity function. As threats evolve and diversify, cybersecurity functions cannot operate effectively in silos.

Author: Vishal Sharma
ISACA Journal Article

The Value of Diversity and Inclusion in Cybersecurity

A strategy based on diversity and inclusion in the workforce will help address the challenges around building a strong security capability in organizations.

Authors: Yuri Bobbert, Morgan Djotaroeno and Bas Van Gils
ISACA Journal Article

Protecting Enterprises From AI-Generated Deepfakes

In recent years, deepfakes have become a potent form of social engineering when used for exploitation and to disseminate misinformation.

Author: John Evans
ISACA Journal Article

Cyber-ESG Synergy: Protecting the 4th Industrial Revolution

It is worth exploring the nuances of stakeholder vs. shareholder capitalism, the impact of ESG on corporate creditworthiness, and the specific methodologies used by rating agencies to assess ESG criteria, with a focus on governance.

Author: Jack Freund
ISACA Journal Article

Integrating Cybersecurity into Project Management: A Comprehensive Approach Across SDLC Phases

In an era when digital transformation is at the forefront of organizational strategies, the importance of incorporating cybersecurity into project management processes cannot be overstated.

Author: Rajanikanth Potturi
White Paper

Examining Authentication in the Deepfake Era

This white paper explores the evolution, current state, and future trajectory of authentication technologies.

ISACA Journal Article

Developing Trustworthy AI: Understanding the Inputs

Bad AI training data leads to bad outputs, and these bad outputs lead to distrust and skepticism of AI systems. People may be more reluctant to use AI systems that they do not find trustworthy, decreasing the return on investment associated with AI.

Author: Safia Kazi
ISACA Journal Article

Are AI BOMs the Future?

The rapid adoption of AI has introduced new attack surfaces that many digital trust professionals are only beginning to understand. AI BOM can help organizations better understand the provenance of AI components used to assess related risk.

Author: Ed Moyle
ISACA Journal Article

Navigating the ISO/IEC 27001:2022 Transition: A 90-Day Challenge

The transition to ISO/IEC 27001:2022 is a strategic process that requires careful planning and execution. 

Author: Jayakumar Sundaram
ISACA Journal Article

Tech Regulations: How to Relieve the Burden of Supervisory Bodies and Reduce Risk for Investors

Cybersecurity adds complexity for investors, financiers, and buyers in the acquisition market, necessitating more thorough due diligence regarding an enterprise’s technology stack. There are three methods proposed herein to relieve this burden.

Author: Yuri Bobbert
ISACA Journal Article

Agile: The X Factor of Internal Auditing

There is a need to make internal audits more adaptable and iterative beyond what a linear waterfall approach allows. Enhancing the adaptability and iterative nature of audits is essential to moving beyond the constraints imposed by a linear waterfall approach.

Author: Thomas J. Bell III
ISACA Journal Article

Cryptographic Advancements Enabled by Diffie–Hellman

Symmetric key cryptography was enabled by concepts first proposed in 1976 in “New Directions in Cryptography.” The concepts proposed have evolved; however, the core ideas remain relevant and can provide valuable insights into how the research community can address security needs.

Author: Srikanth Ambatipudi
White Paper

Exploring Practical Considerations and Applications for Privacy Enhancing Technologies

While privacy enhancing technologies (PETs) are not new, the recent proliferation of machine learning systems, the rise of the data economy, support from policymakers, and increased privacy awareness among consumers have increased their popularity.

ISACA Journal Article

Leveraging Digital Transformation and AI to Combat Financial Fraud in Banking

Within the complex modern financial system, banks are the guards that protect the assets and transactions of many people. Yet it is because of this status that they are the perfect victims of competent criminals.

Author: Maduabuchi Christopher Okonkwo