Trust in Technology

How to Start Your Quantum Migration Journey

Author: Paul Lucier

If quantum migration were a train, it would be a cryptoagility train with the destination quantum readiness. All aboard!

Key Performance Indicators for Security Governance, Part 1

Author: Andrej Volchkov

Having reliable metrics or key performance indicators (KPIs) in the field of information security is a prerequisite to building a successful security program. Measuring operational efficiency, costs and benefits has always been a concern for managers, and information security is no exception.

Leaving the Cathedral: A Case Study of Open Source as a Business Strategy

Author: Ed Moyle

Most practitioners know that support for open-source software can sometimes be a loaded question for an organization. From a usage point of view, there are a few concerns. Organizations worry about compliance with open-source licenses— fearing, for example...

Security and Privacy in the New Normal

Author: Deepa Seshadri

Since the beginning of 2020, communities throughout the world—personal and professional—have been impacted in a way that was always only talked about in hypothetical scenarios, such as running an organization completely virtually.

The Unintended Consequences of Zero Trust on Enterprise Culture

Author: Grace F. Johnson

It has been 10 years since John Kindervag, then with Forrester Research, first laid out the information systems security concept called the zero trust model. In the decade since, few organizations could boldly claim that their information technology environments were safe from hazards and threats emanating from the inside and outside.

Predicting Cybersecurity Risk Severity Using Bayesian-Based Machine Learning

Author: Srinidhi Mallur

Cybersecurity risk assessment is a nebulous process that requires a delicate balance between art and science. Typically, a risk assessor begins by collecting relevant information for all the identified risk factors. The assessor gathers information from logs, architecture diagrams, network topology...

Standards, Guidelines, Tools and Techniques

Author: ISACA

An up-to-date listing of the current IT Audit and Assurance Standards, Guidelines, and Tools and Techniques...

Information Security Matters: The Context of Cybersecurity in the Post-Pandemic World

Author: Steven J. Ross

In my previous article, I stated that “serious cyberattacks seem no worse than before” the COVID-19 pandemic. Whenever anyone qualifies a categorical statement, the qualifier is always awfully important. In this case, it invites the question, “Just what is a trivial cyberattack?”

IS Audit Basics: Ethics in Information Technology

Author: Ian Cooke

I am sitting down to write this column in mid-August, which, believe it or not, is quite late for an ISACA Journal vol. 6 column (at least for me). The reason? After 3.5 years and 21 articles, I have decided that this will be my last column.

The Bleeding Edge: The Dog Days of IoT

Author: Dustin Brewer

When humans first domesticated wolves, the implications of the symbiotic relationships could not have been foreseen. We (humans) were slowly able to somewhat let down our guards while sleeping with our trusty companions on guard and place some of our hunting burdens on our furry friends.

Innovation Governance: Innovation on Trust

Author: K. Brian Kelley

Once upon a time, in order to secure a computer, an organization only had to worry about physical security. After all, computers took up an entire room and were programmed using punch cards that were fed into them. However, as computer technology progressed...

The Practical Aspect: Privacy Compliance—A Path to Increase Trust in Technology

Authors: Vasant Raval and Samir Shah

The need for privacy is increasing at an unprecedented rate. It cuts across technologies and work models, especially the new ones, that create opportunities for and facilitate the management of personally identifiable information (PII).