Home / Resources / News and Trends / Tips Column Archives

@ISACA Tips Column Archives

Get exclusive access to unique perspectives on relevant trends in technology from some of the brightest minds in the industry. Explore tips on topics ranging from cybersecurity and information systems to risk, governance and privacy.

Domain:

More Filters
@ISACA Article

Are You Technical or Non-Technical? Time to Reframe the Discussion

There is value in exploring the problematic nature of labeling someone as technical or non-technical and how this term is overly simplistic and potentially harmful.

16 September 2024
@ISACA Article

Material Matters: The SEC's Cyber Disclosure Reality Check

Cyber disclosures to regulatory and capital markets have become increasingly relevant in the face of ongoing ransomware threats.

19 August 2024
@ISACA Article

Five Key Considerations for Defensible and Reasonable Risk and Security

Reasonability and defensibility are common themes in audits, legal contracts, regulations, and security assessments of information risk management and security (IRMS) programs, capabilities, and controls. The term “commercially reasonable” frequently appears in contractual agreements and regulatory guidelines, signifying common standards for security capabilities and controls.

5 August 2024
@ISACA Article

Examining the Risks of IT Hero Culture

The allure of the "IT hero" is compelling. IT heroes are individuals who, like the Avengers or Batman, seem to single-handedly save enterprises day after day.

1 July 2024
@ISACA Article

The Role of the Risk Sin Eater

While cybersecurity professionals may be experts in cyberrisk and mitigation, business decision makers must weigh the pros and cons of the broader business interests against many forms of risk, of which cyber is only one.

6 May 2024
@ISACA Article

Integrating Climate Change Considerations into ISO Standards: A Paradigm Shift

In an era marked by growing environmental consciousness, organizations worldwide are reevaluating their business practices to align with sustainable principles.

17 June 2024
@ISACA Article

Five Key Benefits of Using a Third-Party Incident Commander for Security Incident Response

Third-party incident commanders are able to coordinate and govern incident response resources effectively, along with bolstering incident response plans and capabilities

1 April 2024
@ISACA Article

Common Sense Risk

Only by applying common sense can practitioners stop managing cybersecurity using the equivalent of mythology.

18 March 2024
@ISACA Article

Do You Overthink? How to Avoid Analysis Paralysis in Decision Making

Establishing clear decision-making criteria can help organizations from becoming bogged down by regularly over-analyzing decisions.

6 March 2024
@ISACA Article

Strategies to Prepare for US State Privacy Law Compliance

Absent a major breakthrough on a federal privacy law, more US states are likely to enact privacy laws that will add to an already complex policy patchwork.

21 February 2024
@ISACA Article

Projecting 2024 Cybertrends and C-Suite Responsibilities

Anticipated trends on the 2024 cybersecurity landscape provide opportunities for C-suite leaders to position their organizations to effectively and securely leverage emerging technology.

17 January 2024
@ISACA Article

Emotional Cyberrisk Management Decisions

Emotions can complicate or even impair organizations' need for rational approaches to cyberrisk but that does not mean there is no place for emotion in the equation.

3 January 2024
@ISACA Article

Defective CISOs: Lock Them Up?

The possibility of legal exposure for CISOs in the current climate reinforces the perils of an already stressful and difficult role.

20 December 2023
@ISACA Article

Five Key Considerations for Developing Crisis Management and Incident Response Tabletop Exercises

Extensive testing, which may include tabletop exercises, is an essential component of enterprises' ability to become more resilient in dealing with cyber incidents.

29 November 2023
@ISACA Article

Seven Key Features, Lessons and Tips from a COBIT Journey of 27 Years

Longtime COBIT user and expert Abdul Rafeq shares his perspective on effective ways to implement and benefit from the information and technology governance framework.

15 November 2023
@ISACA Article

Factors to Consider When Establishing a Cyberdefense: Part 2

Log management, malware defense, data recovery, security training and incident response are among the security areas for which organizations have to have solid approaches in place.

8 November 2023