Uncategorized

The first question many ask, “What is the difference between privacy and security? Is there a different way of assessing privacy and security?” Even today, many people with technology and auditing backgrounds confuse and conflate privacy with security, and they think that doing a security audit is privacy assessment and audit. That is because the …

Best Practices for Privacy Audits Read More »

In our world today, there are more smart devices than there are people. Many people could not make it through a modern workday without using a connected device. A growing number of people are connected to the Internet in one way or another, 24 hours a day. According to Cisco, by 2020, it is estimated …

The Rising Security Risk and Mitigation Options for IoT Devices Read More »

#IamISACA: Striving for Excellence   https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2020/iamisaca-striving-for-excellence

As compliance requirements continue to evolve, it is critical for auditors to stay abreast of the most current regulations. Efforts to implement proper privacy measures should not necessarily lead to separate information security projects completed merely for compliance reasons, but instead should be built into overall cyberrisk and resilience management. The following are 6 elements …

Six Privacy Considerations for Auditors Read More »

Over the past few years, there has been a tremendous shift toward emerging technologies such as blockchain, robotics and artificial intelligence (AI). Significant opportunities lie ahead for AI software market penetration, despite short-term economic turbulence resulting from the COVID-19 pandemic. As AI grows in importance and popularity, the role of internal auditors has evolved in …

Auditing Guidelines for Artificial Intelligence Read More »

ISACA recently conducted a privacy survey, asking respondents about their enterprise privacy hiring and workforce trends, challenges pertaining to data privacy, and regulations and frameworks that guide privacy programs.   https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2021/privacy-in-practice-2021-data-privacy-trends-forecasts-and-challenges

Enterprises often embark on cloud initiatives without being properly prepared for the complexities they will encounter. The success rate of cloud projects is significantly impacted if governance processes do not directly address cloud characteristics. Enterprises must develop a clear governance strategy and management plan to obtain the most benefit from their cloud initiatives.   https://www.isaca.org/resources/news-and-trends/newsletters/atisaca/2021/volume-3/building-cloud-governance-from-the-basics

Organizations must become more agile, make decisions faster, use new management styles, evaluate performance, create new hierarchical structures, and implement best practices. But there is also a need for effective innovation management systems.   https://www.isaca.org/resources/news-and-trends/newsletters/atisaca/2021/volume-9/developing-an-enterprise-innovation-practice