Featured Articles

Columns

Online Exclusives

ISACA Journal Article

Why Was There No Warning? Risk Management

Author: Ramón Serres

Risk management is an old discipline. As such, some tend to underestimate its importance until something bad happens or a crisis is triggered. And COVID-19 brings up risk management again as a trending topic.
ISACA Journal Article

The California Consumer Privacy Act and Encryption: Theory, Practice, Risk Assessment and Risk Mitigation

Author: Larry Marks

The US State of California Consumer Privacy Act of 2018 (CCPA) will have an impact on security professionals, auditors, managers and boards responsible for ensuring its effective implementation.
ISACA Journal Article

Data Ownership: Considerations for Risk Management

Author: Kevin M. Alvero

There is no easy answer to the question of who owns data. Indeed, debates about the subject tend to be theoretical. Depending on the situation, the possessor, the user, the creator and the subject of the data could all claim ownership, and sorting it out can pose logistical, technological and even ethical challenges.
ISACA Journal Article

Avoid Having to Run Somewhere From Ransomware, Part 2: Top 10 Steps to Stay Protected

Authors: Syed Ishaq and Faizan Mahmood

Ransomware can be defined as a malware deployed for the specific purpose of denying access to a victim’s systems and/or files until something of value is exchanged. The primary motivating factor for most ransomware attacks is clearly in the name, a ransom. Part 1 of this article series reviewed several prominent examples of the damage caused by recent ransomwares attacks...
ISACA Journal Article

Avoid Having to Run Somewhere From Ransomware, Part 1: Understanding Ransomware and the Criminals Who Spread It

Authors: Syed Ishaq and Faizan Mahmood

An average of 4,000 ransomware incidents occur daily in the United States at an annual cost of US$1 billion. The number of ransomware attacks more than doubled in 2019, with the average payment per incident coming in at US$41,198 (up from US$6,733 in 2018). Insurance companies are forecasting...
ISACA Journal Article

Aligning COSO and Privacy Frameworks to Manage Privacy in a Post-GDPR World

Authors: Donel Martinez and Joshua Marks

There is one constant in the data privacy landscape: change. The EU General Data Protection Regulation (GDPR) was adopted in 2016 to protect the personal data of EU citizens and harmonize data privacy laws across EU member states. Since then, data privacy has become a growing concern for boards of directors (BoDs).