Home / Resources / News and Trends / ISACA Podcast Library

Discover a podcast series that speaks to you and your career.

Listen to experts in cybersecurity, audit, governance and more as they share their thoughts, insights and explanations on the latest trends and issues that affect professionals like you.

Lauren Strope
Featured Podcast

Scaling Your Threat Modeling Program

Understanding product security risk starts before a single code line is written. Teams can discover threats to the architecture of a system early in the development life cycle with Threat Modeling. While it’s not a new concept, how do we transform traditional ways of Threat Modeling to meet the complexities of modern software development at scale?

In this ISACA Podcast episode, Chris McGowan chats with Lauren Strope, Manager of Application Security at Adobe.

Listen Now

Podcast Topic:

More Filters
Card List
Podcast

Scaling Your Threat Modeling Program

Understanding product security risk starts before a single code line is written. Teams can discover threats to the architecture of a system early in the development life cycle with Threat Modeling.

16 November 2023
Podcast

Secure your Supply Chain with an Effective Vendor Security Program

Security risks introduced by vendors have become a top-of-mind concern for executives today, driven by recent supply chain incidents that have exposed organizations to operational and reputational risks.

6 October 2023
Podcast

Cultivating Inspired Leaders with Kristi Hedges

Are you wondering about the ever-changing landscape of IT compliance and risk management? Look no further. Hyperproof, a leading SaaS compliance operations provider, conducts an annual survey of over 1,000 IT risk, compliance, and security professionals to uncover their top challenges.

4 October 2023
Podcast

Exploring the Benefits of Neurodiversity within Cybersecurity

Neurodiversity within cybersecurity offers many benefits but requires organizations and hiring managers to re-evaluate hiring practices and job descriptions typically structured for neurotypical applicants.

29 September 2023
Podcast

Internal Audits That Create Stakeholder Value Adopting an Agile Mindset

Agile Scrum is a lightweight framework that promises to significantly improve internal audits by creating a mindset that generates stakeholder value through adaptive solutions for complex auditing problems.

17 August 2023
Podcast

Strategies for Avoiding Burnout

Chronic workplace stress can lead to burnout, which poses a significant risk to the mental health of busy professionals, such as auditors. But how can these professionals protect themselves from burnout? And how can their employers help them do so?

15 August 2023
Podcast

The Danger of Distraction in Augmented Reality

While users of technology are becoming more educated in how to avoid cyberattacks such as phishing, a distracted user might be more prone to missing signs of social engineering.

3 August 2023
Podcast

Managing Human Risk Requires More Than Just Awareness Training

A comprehensive information security awareness program must be in place to ensure that employees are aware of and educated about the threats they may encounter at the workplace.

28 July 2023
Podcast

Preparing for Interruptions, Disruptions and Emergence Events

This podcast speaks about how an Information Systems (IS) Auditor can prepare for the Interruptions, Disruptions and the Emergence events that happen to the business and to technology.

21 July 2023
Podcast

IS Audit in Practice: Data Integrity On Demand

On this podcast, ISACA's Hollee Mangrum-Willis and special guest Cindy Baxter discuss the disparities between American communities and access to electronic health records.

13 July 2023
Podcast

Processes of Engagement with Scott Gould

Scott Gould is the author of 'The Shape of Engagement: The Simple Process Behind how Engagement Works.' In this podcast, Scott will discuss the essential frameworks for understanding and operationalizing engagement and building enduring connections with your networks and communities.

23 June 2023
Podcast

Delivering Security Value to Product Teams Using the Power of Data

In security, aligning with product teams has never been more important, especially when outmaneuvering adversaries.

15 June 2023
Podcast

AI Ethics and the Role of IT Auditors

We, as a society, have always lived by certain norms that are driven by our communities. These norms are enforced by rules and regulations, societal influence and public interactions.

9 June 2023
Podcast

Using a Risk-Based Approach to Prioritize Vulnerability Remediation

Organizations today struggle with vulnerability management. More specifically, remediating vulnerabilities in a timely manner poses a challenge.

1 June 2023
Podcast

The True Cost of a Data Breach

Guests Jack Freund and Natalie Jorion discuss the need for additional data for quantitative risk analyses and methods to derive that data when it does not exist. They cover how this was done in the past and their updated method for interpolation of such data from record losses and other firmographic data.

23 May 2023
Podcast

2023 IT Compliance and Risk Benchmark Report

Are you wondering about the ever-changing landscape of IT compliance and risk management? Look no further. Hyperproof, a leading SaaS compliance operations provider, conducts an annual survey of over 1,000 IT risk, compliance, and security professionals to uncover their top challenges.

16 May 2023
Podcast

What Is Your IP Address Cybersecurity IQ? The Role of IP Address Data in a Digital World

There are literally thousands of VPN services on the market. Some are undeniably benign, but others offer a slate of features that are friendly to cyber criminals.

15 May 2023
Podcast

What Kind of Glasses Are You Wearing? Your View of Risk May Be Your Biggest Risk of All

In this episode, we’ll assess risk management myths and discuss how to establish scalable, quantifiable, and always-on risk management for the future.

11 May 2023
Podcast

How Organizations Can Consistently Reduce Cyberrisk

Cyber threats are now a “clear and present danger” to most organizations, companies and governments of the world. A good cyber defense involves many, intricate layers. You can never have enough layers, just like you can never remove all the risk.

8 May 2023
Podcast

Key Considerations for Conducting Remote IT Audits

Conducting adequate preparation including risk assessments, assessing resource requirements and ensuring ongoing communication to harness both the benefits and to address the potential challenges faced when conducting hybrid or fully virtual audits.

3 May 2023
Podcast

Seven Things to Know Before Automating IT General Control Audits

This podcast is a practical discussion with two IT Internal Auditors, Frans Geldenhuys and Gustav Silvo, that have automated IT General Controls across their highly diversified and decentralized group.

2 May 2023
Podcast

Eight Cybersecurity Trends to Watch for in 2023

With the start of a new year, it is a key time for all organizations, small through enterprise, to examine their IT infrastructure and review cybersecurity policies.

14 April 2023
Podcast

Industry Spotlight - Julia Kanouse

Get to know Chief Membership and Marketing Officer Julia Kanouse as she sits down with childhood best friend and ISACA VP Amanda Raible. The duo discuss everything from leadership to motherhood while competing in Mario Kart! Tune in!

12 April 2023
Podcast

Conference Chats with Chelsey & Robyn

Tune in to listen to ISACA’s very own Chelsey Byrd and Robyn Franko as they discuss the upcoming fun at ISACA Conference North America 2023: Digital Trust World. 

30 March 2023
Podcast

Advertising Information Security

In this episode, executive principal at Risk Masters International’s Steven Ross discusses why vendors of IT products and services are advertising information security...

24 March 2023
Podcast

The Future of Technology Risk: 4 Ways to Build Stakeholder Trust in the Technology Risk Imperative

Today, the pace of change across industries is quicker than ever before. Economic, political, and social unrest and a global climate crisis have placed unprecedented disruption and pressures on organizations looking to navigate a rapidly changing environment.

21 March 2023
Podcast

Measuring Security Resilience from the Lens of the Adversary Community

In a world where adversaries are constantly adapting to improve tactics, techniques, and procedures (TTPs), it is crucial to understand the unique traits and goals of various types of adversaries that actively seek to cause harm to an organization.

16 March 2023
Podcast

Risky Business – Jon Brandt

For the average person, life moves quickly. But for business leaders and anyone involved in any aspect of IT, the pace at which technology is changing is overwhelming.

9 March 2023
Podcast

Rethinking Identity Governance

SaaS is eating the world even more than we think. Companies are dealing with SaaS sprawl: hundreds of apps distributed across different owners that store sensitive data and which are used to orchestrate critical business workflows.

21 February 2023
Podcast

2023: The Year of Risk

A review of the events of 2022 shows that 2023 will not be the year of dire new cyber attacks waged by hoodie-wearing cyber criminals or office-bound nation-state APTs.

15 February 2023
Podcast

Career Coach Advice: How to Launch Your IT Audit Career

Career coach Caitlin McGaw will share her top tips for young professionals and career changes on how to launch a successful career in IT audit—from acing your first interview and landing your first job to career resources to help your career continue to grow and thrive.

10 February 2023
Podcast

How to Mature Your Privacy Compliance Program: A Conversation With OneTrust DPO Linda Thielova

Compliance with the world’s ever-increasing list of privacy laws can be a tricky undertaking for any organization, but by taking a few simple steps...

10 February 2023
Podcast

Improving Cyber Resilience in an Age of Continuous Attacks

We live in the age of continuous compromise. This podcast dives into why so many organizations continue to be breached even after spending money on cybersecurity point solutions.

10 February 2023
Podcast

ISACA Live: Advancing Digital Trust Through IT

On National IT Professionals Day, ISACA's Kevin Keh explains how IT professionals can advance digital trust in their organizations and in their industries.

19 January 2023
Podcast

Information Privacy Contradiction: Interest-Based Posture of Compliance and Violation?

Why do individuals, organizations, institutions, nations, or responsible agents work hard to preserve their personal and enterprise data, personnel information, trade secrets, intellectual properties...

18 January 2023
Podcast

Beware the Traps of Data Governance and Data Management Practice

Guy Pearce joins ISACA’s Lisa Villanueva for a conversation about the traps of Data Governance and management.

3 January 2023
Podcast

Should Cybersecurity Be Subject to a SOX-Type Regulation?

Numerous laws and regulations have been passed to protect sensitive information, both at the federal and state level, creating a patchwork of requirements for companies to comply with.

3 January 2023
Podcast

Do Data Go To Waste

The Impact of SOX on the Industry 20 Years Ago and Today. Opponents of Sarbanes Oxley, (SOX) contend the law is too costly for companies to operationalize given the small benefit that SOX regulation provide.

22 December 2022
Podcast

Protecting Your Enterprise and Deterring Fraud in a New Risk Era

As uncertainty persists due to the COVID-19 pandemic, the war in Ukraine, international cyberthreats, inflation, and a looming recession, it is clear that the world has entered a new era of risk.

13 December 2022
Podcast

Meeting Attackers Where They Are

The world's largest software companies leverage modern-day Red Teams to protect against real-world attacks. Many companies focus on vulnerability management, compliance, and patching to secure themselves, but this is only a tiny part of the big picture.

2 December 2022
Podcast

Taking Security Strategy to the Next Level: The Cyber Kill Chain vs. MITRE ATT&CK

In an era of rampant ransomware and other malicious cyberattacks, it’s mandatory to double down on cybersecurity analysis and strategy to ensure an optimal security posture and the protection of critical assets and data.

29 November 2022
Podcast

Auditee Buy-In—A Key Component of Effective Audits

As you plan and execute your audit, do you take time to invest in the stakeholder relationship? This can be an often-overlooked element but essential in an effective audit.

23 November 2022
Podcast

Breaking Down the ESET T2 2022 Threat Report

In this ISACA Podcast episode, ESET’s Chief Security Evangelist, Tony Anscombe, joins ISACA’s Principal, Emerging Technology Professional Practices, Collin Beder to discuss ESET’s recently released T2 2022 Threat Report.

9 November 2022
Podcast

Enabling Digital Trust through Canada's Digital Charter

Data are the lifelines of a digital economy. They drive innovation, enabling cutting-edge research and next-generation technologies, including artificial intelligence (AI)...

4 November 2022
Podcast

It's About (Down) Time

In this ISACA Podcast episode, Risk Masters International's Steven Ross tells ISACA's Collin Beder that organizations should start focusing on hours of unavailable systems and data when measuring the cost of a cyber-attack.

2 November 2022
Podcast

How Social Engineering Bypasses Technical Controls

We are subjected to phishing scams almost daily, and even the most seasoned professional must examine an email to ensure the links included are safe.

27 October 2022
Podcast

ISACA CyberPros – Naomi Buckwalter

Executive Director of Cybersecurity Gatebreakers Foundation, Naomi Buckwalter, joins ISACA’s Jon Brandt to discuss burnout.

27 October 2022
Podcast

What Makes Risk Assessments So Unpleasant and How to Change That

Ryan Cloutier's child came home from school one day and told him that he had figured out the staff Wi-Fi password. Frustrated that the security wasn't better for a school network, Ryan decided to do something about it.

27 October 2022
Podcast

Quantifying the Qualitative Risk Assessment

In this ISACA podcast episode, IT Risk Director and Senior Vice President Mike Powers and IT Segment Risk Manager Julie Ebersbach discuss using the qualitative risk assessment as part of an organization's enterprise risk framework, focusing on using data to inform subjective judgments.

18 October 2022
Podcast

Gaining More Actionable Intelligence Using a Smarter Security Data Lake

In today’s dynamic world of distributed computing and cloud-scale systems, traditional security data platforms and tools such as SIEM typically fall short of actually delivering the intelligence needed to better adapt to the rapidly changing threat landscape.

13 October 2022
Podcast

Industry Spotlight with Ali Pabrai

There is no denying the passion that ecfirst's CEO, Ali Pabrai has for cybersecurity. In this ISACA Podcast, Ali tells ISACA's Hollee Mangrum-Willis that after all his years in the industry, he is still more excited than a two-year-old at the entrance to Disneyland.

11 October 2022
Podcast

Audit in Practice - Auditing Culture

What’s The Risk LLC’s Cindy Baxter sits down with ISACA’s Robin Lyons to discuss auditing culture, which can be one of the most interesting areas to audit.

6 October 2022
Podcast

Managing Cybersecurity Risk as Enterprise Risk

Cybersecurity incidents like ransomware can potentially bring operations to a standstill. Recent regulatory changes by the FTC and proposed changes by the SEC show that both agencies are drafting cybersecurity rules similar to ERM concepts.

6 October 2022
Podcast

Implementing Artificial Intelligence: Capabilities and Risk

University of Florida's Ivy Munoko is passionate about AI and has plenty to share regarding implementation and usage, but ISACA's Collin Beder asks, "is it ethical"?

4 October 2022
Podcast

Incident Report & Continuous Control Monitoring

This episode of the ISACA Podcast is all about incident reporting. Lesotho Postbank's Relebohile Kobeli talks to ISACA's Collin Beder about mitigating risk, minimizing losses from events, and good communication.

4 October 2022
Podcast

Industry Spotlight with Lisa Young

Netflix's Lisa Young started as a bank teller that learned tech by fixing and servicing ATMs, which transitioned to her joining the network ops field and leading her to...

29 September 2022
Podcast

Defending Data Smartly

Some industry watchers estimate that by 2025 the collective data of humanity will reach 175 Zettabytes. ISACA's Jon Brandt invites Dr. Chase Cunningham (aka Dr. Zero Trust) to discuss how to defend the ever-growing amount data...

27 September 2022
Podcast

Foco de la industria - Arnulfo Espinosa Dominguez, Parte II

El vicepresidente del Capítulo Monterrey de ISACA y Director de Auditoría y Fraude de TI de uno de los Grupos Financieros más grandes de México, Arnulfo Espinosa Domínguez, se une a Jocelyn Alcantar de ISACA para compartir muchas cosas que ha aprendido durante sus 20 años de experiencia profesional en la industria.

23 September 2022
Podcast

Ethical AI Shifting the Conversation Left

Many organizations prioritize goals such as gains and profits, which often require rich data sets, but fail to consider the eventual impact of their data handling methodologies on foundational social justice issues.

22 September 2022
Podcast

Foco de la industria - Arnulfo Espinosa Dominguez, Parte I

El vicepresidente del Capítulo Monterrey de ISACA y Director de Auditoría y Fraude de TI de uno de los Grupos Financieros más grandes de México, Arnulfo Espinosa Domínguez, se une a Jocelyn Alcantar de ISACA para compartir muchas cosas que ha aprendido durante sus 20 años de experiencia profesional en la industria.

21 September 2022
Podcast

Why (And How to) Dispose of Digital Data

Bassel takes us on a deep dive into digital data with ISACA's Safia Kazi on the five stages of data disposal in this ISACA podcast episode.

20 September 2022
Podcast

Industry Spotlight with Johann Dettweiler, Part II

In this ISACA podcast episode, we connect with TalaTek Director of Operations Johann Dettweiler to discuss his almost two decades of experience across multiple industry fields, his involvement in FEDRAMP compliance, and why the next generation should focus on adding certifications to their resumes.

15 September 2022
Podcast

Industry Spotlight with Johann Dettweiler, Part I

In this ISACA podcast episode, we connect with TalaTek Director of Operations Johann Dettweiler to discuss his almost two decades of experience across multiple industry fields, his involvement in FEDRAMP compliance, and why the next generation should focus on adding certifications to their resumes.

8 September 2022
Podcast

Achieving Effective Cloud Risk Management

Cloud is ubiquitous now. From small enterprises to large companies, all are moving a part of their technology operations to cloud. Initial reluctance is now nowhere to be seen.

6 September 2022
Podcast

Industry Spotlight with Dr. Blake Curtis, Part II

Author, editor, speaker, and educator, Dr. Blake Curtis is joined by Red Cross’s Senior Internal Auditor Niki Gomes to talk about everything from growing up in a small town to completing his master’s degree in 10 weeks...

1 September 2022
Podcast

Industry Spotlight with Dr. Blake Curtis, Part I

Author, editor, speaker, and educator, Dr. Blake Curtis is joined by Red Cross’s Senior Internal Auditor Niki Gomes to talk about everything from growing up in a small town to completing his master’s degree in 10 weeks...

30 August 2022
Podcast

Industry Spotlight with Arnulfo Espinosa Dominguez, Part II

Vice President of the ISACA Monterrey Chapter and IT Audit & Fraud Director of one of the largest Financial Groups in México, Arnulfo Espinosa Dominguez, joins ISACA’s Jocelyn Alcantar to share some of the many things he has learned over his 20 years of professional experience in the industry. Having realized the value of information at an early age, Arnulfo has forged his path within the IT community.

25 August 2022
Podcast

Industry Spotlight with Arnulfo Espinosa Dominguez, Part I

Vice President of the ISACA Monterrey Chapter and IT Audit & Fraud Director of one of the largest Financial Groups in México, Arnulfo Espinosa Dominguez, joins ISACA’s Jocelyn Alcantar to share some of the many things he has learned over his 20 years of professional experience in the industry.

22 August 2022
Podcast

Current State of Cybersecurity in K12

ISACA's Director of Professional Practices and Innovation Jon Brand hosts Doug Levin, co-founder and National Director of K12 Security Information eXchange (K121 SIX), a national non-profit dedicated solely to helping schools protect themselves from emerging cybersecurity threats.

16 August 2022
Podcast

Industry Spotlight with Todd Fitzgerald

Cybersecurity leader, author, and host of the CISO Stories podcast, Todd Fitzgerald sits down with ISACA’s Chelsey Byrd to discuss his extensive career journey in security...

12 August 2022
Podcast

ISACA Live: Advancing Digital Trust Through Audit and Assurance

A strong audit and assurance function is critical to achieving digital trust in an organization. This conversation spotlights audit's role in digital trust and outlines key priorities. It also shares new ISACA resources for auditors.

11 August 2022
Podcast

Managing Security Across Disparate Database Technologies

We usually think about the most efficient way to do things while working in production environments. Still, often employees forget about an insecure environment once the work has been completed and they have moved on to another project.

9 August 2022
Podcast

Implementing Emerging Technologies: Agile SDLC Still Works

AI is a part of our everyday life. What's The Risk LLC's Cindy Baxter gives ISACA's Kevin Keh examples of modern media like the movies Free Guy, Ron’s Gone Wrong and The Matrix...

4 August 2022
Podcast

ISACA Live: Managing Supply Chain Risk with Richard Hollis

ISACA's risk expert Paul Phillips and Richard Hollis, CEO of Risk Factory and an ISACA Conference Europe speaker, examine top cyber risks impacting the supply chain, steps organizations...

29 July 2022
Podcast

Industry Spotlight with Pam Nigro

On this episode of Industry Spotlight, ISACA's outgoing Board Chair, Greg Touhill, introduces the 2022-23 Board Chair, Pam Nigro.

26 July 2022
Podcast

The Impact of People on Information Technology Landscape

In this episode, ISACA’s Jon Brandt chats with Thomas Lenzenhofer, Business Development Manager at Cisco, about his new ISACA article titled, “The Impact of People on Today’s Information Security Landscape.”

22 July 2022
Podcast

GRC for Intelligent Ecosystems (GRCIE): An Innovative Approach to Workforce Enablement

Executive Director for GRC for Intelligent Ecosystem (GRCIE) Jenai Marinkovic joins ISACA Director of Professional Practices and Innovation Jon Brandt to address key findings in ISACA's 2022 State of Cybersecurity report...

20 July 2022
Podcast

GRC for Intelligent Ecosystems (GRCIE): An Innovative Approach to Workforce Enablement

Executive Director for GRC for Intelligent Ecosystem (GRCIE) Jenai Marinkovic joins ISACA Director of Professional Practices and Innovation Jon Brandt to address key findings in ISACA's 2022 State of Cybersecurity report...

18 July 2022
Podcast

Smarter Testing = Safer Digital Experiences

Application testing is a critical component of a software development lifecycle. A complete testing battery for any application includes not only functionality and usability testing but security and reliability testing as well.

13 July 2022
Podcast

Cyber Decisions Only Executives Can Make

One of ISACA’s most popular Journal columnists joins us to discuss his most recent release, “Cyber Decisions Only Executives Can Make.” Steven Ross chats with ISACA’s Safia Kazi about cyber recovery plans...

8 July 2022
Podcast

Real-World Data Resilience

Join ISACA's Lisa Villanueva as she talks with Guy Pearce about his recently released ISACA Journal article "Real-World Data Resilience". Guy has a deep knowledge of the movement of data and says "it’s about change and nothing is stable."

5 July 2022
Podcast

Breaking Down the ESET T1 Threat Report

ESET, a global leader in cybersecurity, has released its T1 2022 Threat Report, which summarizes the most notable trends that shaped the threat landscape from January to April 2022.

30 June 2022
Podcast

Where Privacy Meets Security

Jo Stewart-Rattray, the Director of Technology & Security Assurance for BRM Advisory, believes privacy is a team sport. Every organization needs to be responsible for asking, “what data is being collected,” “where is the information held,” “what purpose is the information being collected for,” and “how is the information being protected.”

28 June 2022
Podcast

How To Build A Following Around Your Ideas

In this talk based on her book Stand Out: How to Find Your Breakthrough Idea and Build a Following Around It, Dorie Clark explains how to build a following around your ideas.

21 June 2022
Podcast

Industry Spotlight with Jan Anisimowicz

Jan Anisimowicz is an experienced senior IT manager with over 23 years of experience in GRC, data analysis, broad business, and technical perspective in telco, banking, pharma, and insurance.

17 June 2022
Podcast

Climate Resiliency and Regulation

Climate resiliency and green innovations are of worldwide interest today, but what is the best way to use skills and expertise that will make a difference?

16 June 2022
Podcast

Gaining Digital Trust by Eliminating Privacy Dark Patterns

With the growing emphasis on consent for collecting and processing data, some enterprises have turned to tricking data subjects into giving their consent by using privacy dark patterns.

14 June 2022
Podcast

Industry Spotlight with Mark Thomas

Mark and Jessica dive deep into his career journey and their shared history of developing ISACA training content.

9 June 2022
Podcast

Cybersecurity in a COVID-19 World: Insights on How Decisions Are Made

In the early days of the Covid-19 pandemic, all organizations pivoted to remote work.

7 June 2022
Podcast

Industry Spotlight with Caitlin McGaw

Caitlin McGaw answered an ad in the newspaper in 1997 for a position with an Executive Search Firm and she was instantly hooked.

2 June 2022
Podcast

Cyber (Business) Recovery

Steven talks to ISACA's Safia Kazi about how to prepare for a cybersecurity Event and how to recover. Steven discusses the types of attacks to watch out for, Business Continuity Planning and how to recover from a cybersecurity event.

20 May 2022
Podcast

Industry Spotlight with Niki Gomes

Everyone starts somewhere and for Niki Gomes, it was at the front desk of a hotel where she worked her way up to hospitality management, before pivoting to accounting and finally to the American Red Cross...

11 May 2022
Podcast

Industry Spotlight with Ed McCabe

One of Ed McCabe's first childhood memories was taking apart his grandparent's heirloom grandfather clock to find out why it wasn't working.

27 May 2022
Podcast

ISACA Live: Risk Scenarios

Paul Philips and Lisa Young will discuss how risk scenarios help decision-makers understand how certain events can impact organizational strategy and objectives

27 April 2022
Podcast

Managing Data Privacy Risks and Compliance with a Distributed Workforce

Data now includes, consumer's social media, news, view and even browser searches. From 2010-2020, the amount of data created, captured, and copied in the world increased from 1.2 trillion GB to 59 trillion GB and the amount created in the next 5 years is projected to double

22 April 2022
Podcast

CMMC and CUI: Rocket Fuel

Join ISACA's Senior Manager, CMMI Professional Practice, Kileen Harrison as she talks with ecfirst's Chief Executive Officer, Ali Pabrai about his recently released articles, “What Cyberprofessionals Should Know About CUI”, and “US DoD Launches Comprehensive CMMC 2.0 Cybersecurity Framework”.

18 April 2022
Podcast

CyberPros: Evolution of Interconnectivity of Cyber and Warfare with Fred Carr

In this episode, ISACA’s CyberPro, Jon Brandt chats with Founder and CEO of Anchor Systems, Fred Carr about the current threat landscape, challenges, and misalignment between public and private sectors, and impacts on national and global security.

31 March 2022
Podcast

A Security Awareness Program for PCI-DSS Compliance

People are considered the weakest link in any organization’s cybersecurity defenses.

29 March 2022
Podcast

Industry Spotlight with Jo Stewart-Rattray

In this episode of Industry Spotlight, Robyn Franko, Manager of Event Operations and Services at ISACA, chats with Jo about her background and career path, hobbies, and some interesting challenges the industry faces.

24 March 2022
Podcast

The Transformative Power of Mobility

Join ISACA’s Performance Based Training Engineer, Collin Beder as he speaks with Tom Schneider, Senior Associate of Proactive Advisory for Cyber Defense Labs as they discuss Tom’s recently released article “Ensuring that Cybersecurity is Everyone’s Job”.

18 March 2022
Podcast

Industry Spotlight with Raven David

Listen as Raven recaps the success of his cybersecurity awareness program, gives thoughtful advice to the next generation of young professionals, and discusses his current self-educating project, 3D printed chess set with Arduino-powered actuators and a Python chess engine.

16 March 2022
Podcast

Privacy for Sale

Is Privacy a commodity? This episode explores the future direction of privacy and the demise of privacy in the digital age. Could privacy become something that people cannot afford, creating a two-tier system of internet users — those who can afford privacy and those who cannot?

14 March 2022
Podcast

Ensuring that Cybersecurity is Everyone’s Job

Join ISACA’s Performance Based Training Engineer, Collin Beder as he speaks with Tom Schneider, Senior Associate of Proactive Advisory for Cyber Defense Labs as they discuss Tom’s recently released article “Ensuring that Cybersecurity is Everyone’s Job”.

9 March 2022
Podcast

Zero Trust: How to Beat Adversaries at Their Own Game featuring Dr. Zero Trust

ISACA’s Jon Brandt welcomes Dr. Chase Cunningham aka Dr. Zero Trust to the ISACA CyberPros podcast. You may know Chase from his own podcast, Dr. Zero Trust, or book series, Cynja.

4 March 2022
Podcast

Breaking Down the ESET T3 2021 Threat Report

Tune in as ISACA’s Kevin Keh talks with the Chief Security Evangelist of ESET, Tony Anscombe about the latest released report from ESET.

1 March 2022
Podcast

Building Digital Trust in a FinTech Start Up

Today's Page to Podcast features ISACA's Kevin Keh and Donald Tse, the Head of Cyber & Technology Risk at Mox Bank and author of "Cybersecurity and the Technology Risk in Virtual Banking", as they dive into the virtual banking scene in fintech.

22 February 2022
Podcast

Lessons Learned from a Year of Remote Work

Working from alternate work sites using unsecure networks may be here to stay, but there is much to learn from 2020 that can help improve cybersecurity capabilities for remote staff.

18 February 2022
Podcast

Unpacking Pakistan's Cybersecurity Policy 2021

ISACA’s Director of Professional Practices & Innovation, Jon Brandt, is joined by Muneeb Imran Shaikh, author of "Pakistan’s Cybersecurity Policy in 2021: A Review".

15 February 2022
Podcast

Using XDR and Zero Trust to Combat Ransomware

Listen in as ISACA's Research Advisor, Brian Fletcher and Trend Micro's Bill Malik look into the realities behind ZDR and Zero Trust, how ransomware works, and how the both XDR and Zero Trust can help organizations minimize their vulnerabilities.

10 February 2022
Podcast

What is Environment, Social, and Governance (ESG)?

Mark Thomas (Founder, Escoute) and Caren Shiozaki (EVP & CIO, TMST, Inc.) join ISACA's Lisa Villanueva for a conversation about Environment, Social, Governance or ESG.

4 February 2022
Podcast

The Impact of SOX on the Industry 20 Years Ago and Today

The Sarbanes-Oxley (SOX) Act was passed by the United States Congress in 2002. 20 years later, ISACA's Robin Lyons asks Cindy Baxter, Director at What’s the Risk, LLC all about SOX.

1 February 2022
Podcast

Privacy in the Dark (Data)

Listen in as Safia Kazi, ISACA's Privacy Professional Practice Advisor, as she speaks with Steve Ross, Executive Principal of Risk Masters International, about his article "Privacy in the Dark (Data)".

27 January 2022
Podcast

Industry News Wrap

ISACA's CyberPro Jon Brant breaks down industry news stories so far in the new year: Log4j, Cyber Insurance, Augmented Reality/Virtual Reality, Metaverse, Deep Fakes, and even the legal discussion around vehicle car data.

26 January 2022
Podcast

How Do Organizations Control Their Use of Social Media

What are the main risks that most enterprises need to consider when it comes to social media? If you don’t know, you and your organization are in danger of serious reputational risk!

11 January 2022
Podcast

From the Board Level to the Code Level

Blake Curtis is a global business risk and security engineer for Deloitte Global and a research scientist with a Ph.D. in cybersecurity and risk management. Today he breaks down frameworks, governance and governmental controls from the board level to the code level.

6 January 2022
Podcast

ISACA Cyber Pro Chats with Naomi Buckwalter

ISACA’s Cyber Pro, Jon Brandt, invites information security guru, Naomi Buckwalter, Director of Information Security and IT to the podcast to discuss hot and heavy topics within Cybersecurity and the IT industry.

5 January 2022
Podcast

What Will it Take to Reach DevSecOps Maturity?

While our development teams have been busy running full speed ahead using the latest and greatest technology to build amazing products, security teams haven’t always been known to keep the same pace – and we have reached a point of “developer revolt.”

4 January 2022
Podcast

Emerging Tech Session #5 - Ultra-Emerging Tech

Join Kevin Keh, IT Professional Practices Lead - Research Development for ISACA, and guest, Ramses Gallego, International Chief Technology Officer for CyberRes in the latest session of our LinkedIn Live series on Emerging Technology.

27 December 2021
Podcast

Security Operations Challenges in 2021

ISACA’s Director, Channel Business Development, Chris DeMale is joined by ServiceNow’s Director of Product Marketing, Karl Klaessig in this follow up interview that takes a deeper look into his presentation during ISACA’s Virtual Summit session, Security Operations Challenges in 2021.

10 December 2021
Podcast

Information Security Programs Need to be Ubiquitous, Proactive, and Vigilant

This ISACA TV interview is a discussing about information security concerns (and challenges), evolution, and the future. Topics covered include mobile computing devices, the Internet of Things (IoT), artificial intelligence (AI), cyber threat intelligence (CTI), software tools...

7 December 2021
Podcast

How Innovative Enterprises Win With Secure Machine Learning

Enterprises use machine learning to validate who they are doing business with and to find new opportunities. ISACA's IT Professional Practices Lead Kevin Keh discusses secure machine learning with Protegrity's Chief Security Strategist Ulf Mattsson.

1 December 2021
Podcast

HCL State of Cybersecurity 2021

Jon Brandt (Information Security Professional Practices Lead at ISACA) and Renju Varghese (Fellow and Chief Architect at HCL Technologies) break down the State Of Cybersecurity 2021 —Part II report.

22 November 2021
Podcast

ISACA’s New CyberPro – Jon Brandt

Listen in as ISACA’s Information Security Professional Practices Lead, Jon Brandt grabs the podcast microphone and takes over November’s Cyber Pros to discuss CISA’s Directive Breakdown.

19 November 2021
Podcast

ISACA Live: Emerging Tech - Cloud

Why is the cloud still considered an emerging technology in 2021? Why is the cloud both an enabler and catalyst for all other technologies? How has the cloud changed our organizational eco-systems?

16 November 2021
Podcast

LinkedIn Live: State of Cybersecurity, Part 2

In honor of Cybersecurity month, ISACA’s Director of Communications, Kristen Kessinger, and Information Security Practices Lead, Jon Brandt, discuss the findings of this year’s ISACA State of Cybersecurity...

15 November 2021
Podcast

ISACA's Global Strategy

Join ISACA’s CEO David Samuelson as he discusses ISACA’s Global Strategy with ISACA’s Chief Global Strategy officer Chris Dimitriadis. Chris shares his career path to ISACA, industry trends, advice to the next generation and how ISACA will continue to innovate in the future!

11 November 2021
Podcast

Cyber Risk and Communicating to a Board of Directors

Digital transformation has heightened due to the pandemic. We went from, “we can’t work from home” to “we can only work from home moving forward”.

10 November 2021
Podcast

Digital Body Language

What is digital body language and why does it matter? Join ISACA's Director of Global Volunteer Engagement Megan Moritz as she speaks with Erica Dhawan, author of Digital Body Language: How to Build Trust and Connection, No Matter the Distance. Mega and Erica discuss...

10 November 2021
Podcast

Getting Started with Risk Quantification

One of the cornerstones of managing the unknown is defining it and measuring it. Anything that could cause harm to an organization needs to be tracked and managed. As more and more transactions occur entirely on digital platforms or are at least facilitated digitally, the ability of cybersecurity issues to trigger a breakdown in the delivery of products and services is a top concern of executives and boards.

10 November 2021
Podcast

IT Audit in Practice: Survival When You are Small-business Continuity and Resilience

Everyone needs a resilient operating model, and the pandemic has been the reality check showing how necessary it is to have a plan. Was your small-business or corporation prepared for the shift to remote work in early 2020? If not, you probably realized that business continuity is more than having the right systems and applications in place.

10 November 2021
Podcast

Privacy-Preserving Analytics and Secure Multiparty Computation

Organizations are increasingly concerned about data security in several scenarios, including collecting and retaining sensitive personal information; processing personal information in external cloud environments, and information sharing.

10 November 2021
Podcast

Security as a Service

What is security as a service and when is it needed? Tune in as ISACA’s Cyber Pros explain how the increase in hacks and attacks are forcing companies to take cyber security more seriously.

10 November 2021
Podcast

The Cybersecurity Workforce

Join ISACA’s Director of Communications, Kristen Kessinger as she interviews ISACA’s Information Security Professional Practices Lead, Jon Brandt about what is currently happening in the cybersecurity workforce.

10 November 2021
Podcast

US DoD’s CMMC Guidelines — What You Need to Know

Cybersecurity Maturity Model Certification or CMMC is a new security program being released by the US DoD. If you are a DoD contractor, your livelihood could be at stake as contract requirements and contractors will need to be certified or a contract won’t be awarded.

10 November 2021
Podcast

ISACA Conference Europe – Keynote speaker: Vinh Giang

Listen in as ISACA Conference Europe Keynote speaker, Vinh Giang's discusses how he became the successful entrepreneur, magician and keynote speaker that he is today.

18 October 2021
Podcast

ISACA’s Digital Transformation Part III — The Digital Member Experience

David Samuelson and ISACA’s Chief Membership Officer, Julia Kanouse discuss the positive impact of technology on our members and the ways in which our global community has grown even closer despite the pandemic.

6 August 2021
Podcast

Why should I listen to you?

Dustin Brewer and Frank Downs will take you through their journey, from their start in cybersecurity to how they expanded their knowledge and skills to become the recognized cyber professionals that they are today.

3 August 2021
Podcast

The Lowdown on IoT

Join ISACA's Dustin Brewer as he tells you what you need to know about IoT now – why is it still considered an emerging tech? What are the biggest cybersecurity threats, and what opportunities will the Internet of Things bring in the next five years?

28 July 2021
Podcast

Breaking Down the ESET Threat Report

ESET has released its T1 2021 Threat Report, summarizing key statistics from ESET detection systems and highlighting notable examples of ESET’s cybersecurity research.

22 July 2021
Podcast

Cybersecurity Isn’t Real, Right? Wrong!

Every day, the risk of cyber and ransomware attacks regularly increases in frequency and danger. But despite the proof in numbers, many organizations still don’t recognize the need to fortify their fortress and improve the strength of their Cybersecurity practices.

15 July 2021
Podcast

Building a Zero-Trust Network Platform

Finding a balance between a pleasant user experience and stringent security requirements can be a challenge.

8 July 2021
Podcast

Advance Security for Secret Information

Listen in as ISACA Journal columnist, Steven Ross, CISA, CDPSE, AFBCI, CISSP, MBCP, delves deeper into his latest article, “Advanced Security for Secret Information.” As a follow up to his two previously published journals, “Keeping Secrets,” and “Secrets and Privacy,” Ross continues to make the case that the protection of secret information is becoming a significant issue in cybersecurity.

28 June 2021
Podcast

ISACA’s Digital Transformation Part II — People, Process, and Technology

David Samuelson is back and continuing his discussion of ISACA’s Digital transformation. This time David interviews members of ISACA’s IT team — CTO, Simona Rollinson; Sr. Director, Application Development, Sean Ways; and Sr. Director of Enterprise Project Management, Amy Witkowski.

23 June 2021
Podcast

ISACA’s Digital Transformation Part I — Positive Potential of Technology

Join ISACA’s CEO David Samuelson as he discusses the positive potential of technology with ISACA’s Chief Product Officer, Nader Qaimari.

23 June 2021
Podcast

Just the Fax on Cybersecurity

Is your home printer or fax machine an IOT device? You bet it is! Dubbed ‘Faxploit’, research has shown how cyber criminals can infiltrate any home or corporate network by exploiting wireless printers and fax machines. A fax numbers is all it takes to launch this type of attack.

16 June 2021
Podcast

The Relationship Between Privacy and Research

Volunteering to participate in medical research is a commendable act of service, but to do so can understandably raise questions about subject privacy. In this episode of the ISACA Podcast, ISACA Journal columnist Cindy Baxter discusses...

18 May 2021
Podcast

Supply Chain Security Considerations

The computer chip shortage resulting from the COVID-19 pandemic may sound like a mere supply chain issue, but the ramifications of it have also been felt in the cybersecurity sector.

11 May 2021
Podcast

Pursuing Risk Resilience

To survive—and thrive—after a digital transformation, organizations must establish a robust resilience program. In this episode of the ISACA Podcast, sponsored by ServiceNow, Risk Solutions Specialist Brandon Reese...

16 April 2021
Podcast

The State of Cryptocurrency

Cryptocurrency has helped make blockchain technology mainstream, lauded by the general public for its decentralizing capabilities and in the cybersecurity space due to its integrity and self auditing.

6 April 2021
Podcast

Diversifying the Security Hiring Pool

It is no secret that there has long been a gap in the cybersecurity workforce. But enterprises can take a step toward filling it by looking to nontraditional candidates, according to Adobe’s Director of Application Security, David Lenoe.

29 March 2021
Podcast

Remote Access Tools From a Hacker Perspective

Remote access tools can be an IT blessing, allowing tech support to quickly and remotely troubleshoot computer problems while reducing the need for lengthy conversations with confused employees.

9 March 2021
Podcast

Risk After COVID-19: A New Workforce

The COVID-19 pandemic has prompted massive changes within the modern workforce, providing risk assurance and audit professionals a unique opportunity to assess how they approach the risk framework.

22 February 2021
Podcast

The Perils of Overlooking Physical Security

With today’s advanced cloud capabilities, cybersecurity is an obvious priority at many organizations. But that can leave physical security diminished or outright neglected.

4 February 2021
Podcast

Assessing the Ethical Implications of Information Technology

IT enterprises with strong ethical frameworks are successful not only in making a greater, more positive impact on society, but in terms of financial and reputational status as well. To achieve this, however, organizations must be able to involve everyone...

14 January 2021
Podcast

What Makes a Threat an APT?

APTS are typically driven by experienced cyberactors, significant funding and a target that possesses extremely sensitive data. The depth of these threats means that virtually no enterprise is immune, even those which have implemented highly sophisticated cybersecurity measures.

22 December 2020
Podcast

Exploring the Push for Zero Trust

Increasing pressure on many organizations to meet compliance requirements has resulted in a push to adopt a zero trust approach. But for implementation to be successful, enterprises must obtain a thorough understanding of the nuances of the framework.

16 December 2020
Podcast

The Microcomputing Revolution

Since its conception, microcomputing has made waves in the open source community, providing an accessible and relatively user-friendly way for technology owners to create their own amateur smart devices before mass-manufactured ones hit the market.

3 December 2020
Podcast

Strategies for Securing Remote Technology

The dust of the COVID-19 pandemic has begun to settle and professionals around the globe are now more comfortable with the realities of remote work. Yet even increased familiarity with working from home still leaves room for security threats to arise.

11 November 2020
Podcast

Managing Malware Threats

Phishing emails and dangerous links are among the most pervasive threats to cybersecurity, capable of targeting everyone from seemingly impenetrable government organizations to college students’ university email accounts.

4 November 2020
Podcast

The Evolution of Wi-Fi

Once a technological marvel, the idea of a wireless connection to the Internet has become so engrained in the digital world that it is hard to fathom a time when that was not the case.

15 October 2020
Podcast

Why You Need a Proactive Approach to Risk

The wave of remote working arrangements implemented as a response to the COVID-19 pandemic has introduced new and often unpredictable IT vulnerabilities.

14 October 2020
Podcast

Engineering an Effective Privacy Game Plan

Putting effective privacy measures into practice can be a difficult task for organizations that lack a comprehensive, well-documented privacy strategy. Without one, enterprises may be exposing customer data to vulnerabilities, and could find themselves at risk of noncompliance with privacy regulations.

8 October 2020
Podcast

Finding the Human Factor in Work from Home

Once considered a privilege, remote work has become a necessity resulting from the public health risk posed by COVID-19.

7 October 2020
Podcast

Breaking Down Blockchain

At its core, blockchain functions to maintain the integrity of data and systems. But how does it compare to other databases and when should it be used?

9 September 2020
Podcast

The Road to Achieving Privacy by Design

Most organizations would agree that privacy by design is fundamental to growing a successful business and building customer trust. Yet putting this ideal into practice can often prove challenging. In this episode of the podcast...

1 September 2020
Podcast

Cybersecurity Degrees or Certificates?

When it comes to the ever-expanding field that is cybersecurity, passionate practitioners should adopt the attitude that there is always more to learn.

5 August 2020
Podcast

Creating Value by Taking Risks and Overcoming Fear of Failure

The thought of taking a risk can dredge up feelings of discomfort or even outright fear for many. This reluctance has only been amplified by the uncertainty stemming from the COVID-19 pandemic.

29 July 2020
Podcast

Framework Overload

Cybersecurity frameworks can be a valuable tool for organizations, helping them implement best practices and establish documentation for complex processes.

30 June 2020
Podcast

Protecting the Privacy of Our Digital Selves

As the role of technology has expanded, so has the amount of personal data that are being shared. While people want to protect their privacy, there is often a tradeoff between being able to use a service and not sharing data about yourself.

11 June 2020
Podcast

Privacy Expectations and Regulatory Complexities

With the growing number of privacy regulations around the world and the growing emphasis on privacy, organizations must protect their customers’ privacy. But what happens when a privacy violation occurs in one country but affects someone in a different country...

14 May 2020
Podcast

Information Systems in the Time of Pandemic

Many organizations found themselves unprepared for the workplace and business disruptions caused by COVID-19. But it is possible for organizations to act now to protect their information systems.

30 April 2020
Podcast

Cybersecurity Considerations for Remote Work

As a result of the COVID-19 pandemic, many organizations are now trying to manage having an entirely remote workforce. While remote work can allow people to stay safe while doing their jobs, there are some cybersecurity concerns associated with remote work.

24 April 2020
Podcast

Understanding and Addressing CISO Burnout

A recent survey found that 90 percent of CISOs would take a pay cut if it meant better work/life balance. There are many reasons for CISO burnout, and a broader cultural shift is needed to combat the excessive pressure put on CISOs. In this podcast episode, Dustin Brewer and Frank Downs discuss the reasons for CISO burnout, why it is a problem and how it can be addressed.

31 March 2020
Podcast

Fear IS OK, But Complacency Will Kill You

Complacency, refusal to deviate from a plan and freezing in stressful situations are harmful in a corporate environment but and can be deadly in an extreme adventuring context. Alison Levine, the first American women's Everest expedition team captain, shares how lessons she learned on Everest can apply in a business context.

26 February 2020
Podcast

Lessons Learned From the First-Ever Hack

Inventor Guglielmo Marconi, a key contributor to wireless telegraphy, did not want to engage with anyone who criticized his wireless telegraph technology, and he believed it to be completely secure. But in 1903, magician Nevil Maskelyn hacked a wireless telegraph communication.

5 February 2020
Podcast

Understanding the Marriott Starwood Hack

More than 500 million Starwood accounts were compromised in the recently discovered Marriott Starwood hack. How can those compromised protect themselves, and what are some of the lessons learned? In this podcast, we discuss why the hack happened, how the impact could have been minimized and some key takeaways from Marriott Starwood's response.

20 December 2018
Podcast

Using Red Teaming to Improve Your Security

Red team exercises can help enterprises find and address their weaknesses. Unfortunately, the cybersecurity skills gap extends to red teams and blue teams. In this podcast, Frank Downs and Dustin Brewer discuss why red teaming, in conjunction with blue teaming, is a valuable tool for cybersecurity, and they also discuss some of the causes of and solutions to the skills gap.

18 December 2019
Podcast

Rise of the Digital Natives

The technology landscape of the 2020s is sure to include some sweeping changes. What impact might the rise of more digital natives to leadership roles within their organizations have on how organizations explore and deploy technology? On this episode of the ISACA Podcast's 50th Anniversary Series, guest Alicja Foksinska offers her perspective.

3 December 2019
Podcast

Dynamic Information Security in a Static Organizational Culture

Understanding an organization’s culture is essential when building a cybersecurity program. But how can security professionals learn about the culture, and how should that drive security programs? In this podcast, we discuss how to build a strong cybersecurity culture, how to leverage the organization’s culture when developing security initiatives and strategies to overcome impediments to a cyberculture.

27 November 2019
Podcast

Overcoming Complexity to Secure Critical Infrastructure

Complex interdependencies in the supply chain and elsewhere can make assessing risk difficult, particularly when it comes to protecting critical infrastructure. In this episode of the ISACA Podcast, guest Charlie Harry provides his perspective on how governments and organizations can overcome these challenges.

25 November 2019
Podcast

Cyberattacks on Industrial Technology and SCADA Systems

An unsophisticated attack on industrial control systems can halt the operations of manufacturing plants, resulting in lost revenue and reputational harm. But a few simple steps can help organizations prevent attacks from happening and recover quickly when they do occur. In this podcast, we discuss the steps organizations can take to secure their operations.

21 November 2019
Podcast

Cyberleadership in an Ecosystem Context

To tackle the complex challenges of the cyberlandscape, strong leaders are needed. But what makes someone a leader, and what should be expected of leaders? In this podcast, Matt Doan discusses how to be a leader, why more cyberleaders are necessary and why it’s beneficial to think of cybersecurity in an ecosystem context

21 November 2019
Podcast

Diving into Data with Computer-Assisted Audit Tools

Computer-assisted audit tools can help auditors improve testing and more efficiently deal with the barrage of data being created these days. Infosecurity-ISACA North America Expo and Conference presenter Rochelle Vargas discusses why she considers these tools to be game-changers for auditors.

20 November 2019
Podcast

Seeing Beyond Taboos to Understand the Dark Web

Many organizations are intimidated by the dark web or don't think they have the needed expertise to counter security threats that originate there. In this episode of the ISACA Podcast, recorded from the Infosecurity-ISACA North America Expo and Conference, conference presenter Alex Holden makes the case for why organizations need to prioritize understanding the dark web, and explains how they can go about doing it.

20 November 2019
Podcast

New Paths in the Pursuit of Knowledge

Learning and certification have been at the heart of ISACA's 50-year history, but many of the ways in which technology professionals have pursued industry expertise have changed with the times. Guest Allan Boardman provides his perspective on what has changed and what has stayed constant for learners in ISACA's professional community.

19 November 2019
Podcast

Examining the NordVPN Hack

The use of VPNs is often touted as a strong security measure, but what happens when the VPN service you use is compromised? In this podcast, Dustin Brewer and Frank Downs discuss the recent NordVPN hack, the importance of pen testing and auditing, and lessons learned from the incident.

15 November 2019
Podcast

Dispelling Myths About the Tech Workforce Gender Gap

The misconceptions about why women are underrepresented in the tech workforce are numerous – some cling to the notion that girls and women aren't as interested or proficient in tech fields, despite plenty of evidence to the contrary. In this SheLeadsTech Series episode of the ISACA Podcast, guest Beverly Allen addresses some of the misconceptions about the gender gap in technology fields such as cybersecurity.

12 November 2019
Podcast

Using COBIT to Govern and Manage Third-Party Risk

Every organizations uses suppliers, and these suppliers (while adding value) also can pose a risk. In this podcast, Mark Thomas discusses some of the main challenges organizations face when managing their vendor and supplier risk, how to use COBIT to govern and manage this risk, and how organizations not using COBIT can put the tips presented in this podcast into practice.

8 November 2019
Podcast

Using COBIT for Effective Digital Transformation

Digital transformation can give organizations a competitive edge and improve their operations. The COBIT framework can be used as a powerful tool for digital transformation efforts. In this podcast, we discuss how to use COBIT to guide your organization’s digital transformation efforts.

5 November 2019
Podcast

Volunteerism: The Catalyst of ISACA’s Sustained Growth

From its proud but humble origins as a small group of auditors in the Los Angeles area, ISACA has evolved over the past 50 years into a thriving global association of business technology professionals. A spirit of volunteerism has been the catalyst, as explored in this episode of the ISACA Podcast with guest Michael Cangemi.

29 October 2019
Podcast

Addressing the Challenges Facing IT Auditors

Organizations that want to have a competitive edge must leverage the power of emerging technology, but this technology adds complexity to IT auditing. What can auditors do to address this complexity, and what is the role of business leaders when it comes to IT audit? This podcast, in partnership with Protiviti, discusses the results of the 2019 Global IT Audit Benchmarking Study and provides insights on the top challenges IT audit professionals face, how to address these challenges and the skills IT auditors must have.

22 October 2019
Podcast

Applying Environmental Sustainability to Digital Transformation

Environmental sustainability principles support a healthy ecosystem that sustains life. Much of the language used in environmental sustainability is also used in the digital ecosystem. In this podcast, we discuss how environmental sustainability principles can be applied in a digital transformation context to protect a valuable resource of modern times: information.

15 October 2019
Podcast

Making Strides in Tech Workplace Culture

ISACA recently surveyed nearly 4,000 professionals in the tech workforce to find out what motivates them, what factors influence retention most and how perceptions about the workplace vary between women and men. In this SheLeadsTech Series episode of the ISACA Podcast, we delve into several of the survey findings.

1 October 2019
Podcast

Exploring Cybersecurity Misconceptions in Pop Culture

Popular culture depictions of cybersecurity, while entertaining, are often inaccurate, which could be dissuading people from exploring careers in cyber. In this podcast, we discuss some common misconceptions of cyber in pop culture, how that affects the cyberworkforce and how cyberprofessionals can draw people into cybersecurity careers.

26 September 2019
Podcast

Breaking Down Barriers in Mobile Security

The need for mobile security solutions has exploded in the 2000s, but many of organizations' traditional security considerations are insufficient when it comes to accounting for the proliferation of mobile devices. In this 50th Anniversary Series episode of the ISACA Podcast with guest Eric Green, we find out why it is so hard for individuals and their organizations to get it right on mobile security, and what can be done to break down those barriers.

24 September 2019
Podcast

Rebuilding Institutions for an Online World

Many of our institutions were created before the internet and major shifts on the technology landscape introduced unforeseen risks, threats and opportunities. In this Off-stage and Off-script edition of the ISACA Podcast, Infosecurity-ISACA North America Expo and Conference keynote speaker Jamie Bartlett provides his perspective on how to course correct.

3 September 2019
Podcast

How to Stay Motivated About Cybersecurity, Build Your Network and Earn CPE

Enthusiasm for cybersecurity helps professionals stay motivated, and finding a network of like-minded professionals can be invigorating. Conferences can help cybersecurity professionals learn more and stay excited about cyber, but the amount of information gained from them can be overwhelming. In this Cyber Pros Exchange podcast, we discuss how you can make the most of a conference experience.

28 August 2019
Podcast

Who Holds the Keys to Your Data

Data centers no longer look the same as they did years ago. More and more is being outsourced, and the involvement of third parties can create risk for organizations. In this podcast, we discuss the implications of an outsourced data center and what organizations can do to keep their data safe.

20 August 2019
Podcast

Innovating with a Purpose

As automation has taken hold, more and more jobs that people used to perform are now taken care of by machines. That means humans have more opportunities to innovate and pursue purpose-driven careers that are meaningful to them on a personal level. In this Offstage and Offscript edition of the ISACA Podcast, EuroCACS/CSX 2019 keynote speaker Jon Duschinsky discusses why people and organizations should be enthused about the new professional landscape.

6 August 2019
Podcast

Internet of Medical Things

Medical devices that are connected to the Internet can empower patients and help healthcare providers better monitor their patients’ health. But these connected devices also pose a great security risk as they collect personal health information. In this podcast, we discuss the risk and benefits of connected medical devices, the regulatory landscape surrounding Internet of Medical Things devices, and how to securely configure them.

31 July 2019
Podcast

Cyber in the Kitchen

The kitchen has become a testing ground for Internet-connected devices. While these devices can make cooking easier and more enjoyable, they present a security risk. In this podcast, we discuss the risk of IoT-connected devices and how you can leverage their benefits while remaining secure.

23 July 2019
Podcast

Women in Technology: Starting Early to Address the Leaky Pipeline

As a high school student, Kyla Guru already has started her own cybersecurity education program and helped launch a conference for high school girls interested in technology. In this SheLeadsTech Series edition of the ISACA Podcast, Guru talks about how she became so engaged, so quickly, in cybersecurity and championing girls and women in technology.

16 July 2019
Podcast

The Staying Power of the CISA Certification

The Certified Information Systems Auditor (CISA) certification is ISACA's flagship certification and has played a major role in the organization's growth and global cachet over ISACA's 50-year history. In this 50th Anniversary Series edition of the ISACA Podcast, guest Thomas Phelps discusses how the CISA has remained relevant amid a dynamic and fast-changing technology landscape.

9 July 2019
Podcast

Does IT Auditing Still Make Sense?

The role of IT auditors has changed as technology has changed. In this podcast, we discuss the role of IT audit and how IT audit can help strengthen information security and cybersecurity measures.

2 July 2019
Podcast

Moving Risk Management From Fear and Avoidance to Performance and Value

Many organizations view risk management as an unpleasant process that has to be done to meet regulatory requirements. But what if risk management were leveraged to add value to organizations and strengthen their security measures? In this podcast, we discuss how to use risk management to improve performance and add value.

27 June 2019
Podcast

Examining the Baltimore Ransomware Attack

A ransomware attack leveraging an unpatched vulnerability affected several government services for the city of Baltimore (Maryland, USA). In this podcast, we discuss how this ransomware attack occurred, the services it affected and lessons learned from this attack.

25 June 2019
Podcast

Technology Shifts in the Financial Sector

From mobile payments to the use of artificial intelligence to the introduction of new security risks, technology has had a profound impact on how the financial sector operates. In this 50th Anniversary Series episode of the ISACA Podcast, Ashley Holmes analyzes the past, present and future state of fintech. Holmes notes that banks and others in the financial services sector have to manage a balancing act in embracing innovation and automation while not alienating customers that still expect a certain level of human-to-human service and accessibility.

18 June 2019
Podcast

Managing Unstructured Data

In an era of data overload, dealing with unstructured data poses distinct challenges to organizations. In this Off Stage and Off Script Series edition of the ISACA Podcast, North America CACS 2019 conference presenter George Khalil provides his perspective on which pitfalls should be avoided when it comes to managing unstructured data.

28 May 2019
Podcast

Protect Your Data Against Insider Threats

Most organizations know how to respond to malicious outsiders who may try to steal sensitive data. But what about the insider threat? In this podcast, we discuss ways to protect against the insider threat, and we use the example of a distillery to show the steps you can take to protect your data.

21 May 2019
Podcast

Advancing Gender Diversity in Leadership Roles

While organizations increasingly understand the value of gender diversity in leadership roles, they don't always know how to make it a reality. In this episode of the ISACA Podcast's SheLeadsTech Series, Kellie McElhaney provides guidance on steps organizations can take to create meaningful inclusion in their leadership ranks.

17 May 2019
Podcast

A New Rubric for IT Retention and Recruiting

The old methods of recruiting and retaining qualified IT professionals often disadvantages women and minorities. A new method of finding and keeping diverse candidates is needed.

14 May 2019
Podcast

Professional Networking Over the Years

While social media has helped to reshape the professional networking landscape, some fundamentals of networking remain the same. In this 50th Anniversary series episode of the ISACA Podcast, ISACA member Matthias Kraft discusses what has changed, and what has not, when it comes to professional networking.

8 May 2019
Podcast

Combating Cyberattacks With a Culture of Cybersecurity

Cybersecurity’s role in recent years has grown considerably, but the most common exploits have remained the same over decades. Because of the sophisticated approaches many of these attacks use, people are unable to identify that phishing attacks today are fundamentally similar to the phishing attacks that occurred years ago. In this podcast, we discuss some common security attacks, building a security culture and the role of the C-suite in cybersecurity.

30 April 2019
Podcast

The Evolving Role of Technology Governance

As technology increasingly has become a central driver of business performance, the governance of that technology has become more challenging and more important for organizations. In this ISACA Podcast 50th Anniversary series program, ISACA board director Tichaona Zororo provides his perspective on how technology governance has evolved over the years and the impact that the COBIT framework has made for governance professionals.

16 April 2019
Podcast

Another Win for Global Consumer Data Rights

There is a growing international movement advocating for the protection of consumer data and privacy. The EU passed the General Data Protection Regulation (GDPR), and not long after, the state of California passed a similar data protection law. In this podcast, we compare and contrast GDPR with California’s law and discuss the growing emphasis on privacy and what it means for organizations and individuals.

10 April 2019
Podcast

How Technology Professionals Can Find Their Voice

Technology professionals sometimes struggle to connect on a human level when discussing their technology-driven business challenges and opportunities. In this Offstage & Offscript edition of the ISACA Podcast, 2019 North America CACS keynote speaker Sekou Andrews explains why finding ways to humanize their expertise better positions technology practitioners for success.

3 April 2019
Podcast

The State of Cybersecurity, 2019

The role of cybersecurity is becoming increasingly important, and organizations need cybersecurity professionals with technical skills and business acumen. In this podcast, we explore the biggest cybersecurity challenges facing enterprises, the skills gap and how to draw people to careers in cyber.

3 April 2019
Podcast

What Is Information Security Worth?

Information security professionals understand the value of their work, but it can be difficult to show those outside information security how valuable it is. In this podcast, we discuss some ways that the information security practitioner can showcase the value of information security.

27 March 2019
Podcast

The Future of IT Audit

On this ISACA 50th Anniversary Series Podcast, Krysten McCabe, of The Home Depot, looks ahead to the future of the IT Audit profession, given the rise of automation and other changes to the technology landscape.

26 March 2019
Podcast

Attracting More Women to Cybersecurity

Organizations continue to struggle with filling open cybersecurity positions – a challenge that is particularly pronounced when it comes to bringing women aboard to fill cybersecurity roles. In this month’s SheLeadsTech Series edition of the ISACA Podcast, Australia-based cybersecurity recruiter Charlotte Osborne provides a recruiter’s perspective on why organizations struggle to attract and retain female practitioners, and offers some potential solutions enterprises can explore to put together stronger and more diverse teams.

13 March 2019
Podcast

The Cybersecurity Skills Gap

Having technical skills is no longer enough for cybersecurity professionals; enterprises are also looking for employees with business acumen. In this podcast, we discuss the shortage of skilled cybersecurity professionals, the impact that has on the industry and how people can get the skills they need to build a career in cybersecurity.

5 March 2019
Podcast

The Road to GDPR Compliance

Despite the GDPR compliance deadline having passed and the lofty noncompliance fines, many organizations are still unsure of how to address GDPR compliance. In this podcast, we discuss the scope of GDPR, customers’ growing concern for privacy and practical steps your enterprise can take to become GDPR compliant.

28 February 2019
Podcast

Building an Early Relationship with ISACA

Providing early opportunities for young professionals to accelerate their career paths and expand their networks has long been a hallmark of ISACA. In this 50th Anniversary Series episode of the ISACA Podcast, ISACA member Mais Barouqa discusses how ISACA credentialing and volunteer opportunities have helped her grow as a young professional.

26 February 2019
Podcast

The Ingredients of Successful Innovation

What drives successful innovation on the modern enterprise landscape? In this ISACA Podcast Behind the Curtain series program, 2019 North America CACS conference opening keynote speaker Guy Kawasaki addresses some of the key elements that contribute to organizations’ ability to innovate – such as creativity, hard work, opportunism and a little bit of good luck.

12 February 2019
Podcast

The Mother of All Breaches

The largest data breach to date was recently discovered. The Collection 1 data breach has 773 million records, and these data were found from a variety of sources. In this podcast, we discuss what makes the Collection 1 breach different from other breaches and what you can do if your information was compromised.

31 January 2019
Podcast

Confronting Gender Bias in the Tech Workforce

Gender bias in the workplace plays out in a variety of ways – some obvious, others much more subtle. In this ISACA SheLeadsTech series podcast with guest JJ DiGeronimo, we discuss the ways in which enterprise leaders can make the tech workforce more welcoming to female practitioners and the key ingredients for success in programs designed to counteract gender bias in the workplace.

17 January 2019
Podcast

ISACA – 50 Years and Counting

ISACA is celebrating its 50th anniversary in 2019, having evolved from a grassroots, Los Angeles-based organization focused on electronic data processing in 1969 to the global business technology association it has become today, with 140,000 members and local chapters in more than 220 countries. In this 50th Anniversary Series podcast, ISACA board chair Rob Clyde addresses how the organization has changed – and what aspects have not changed – over the past 50 years, and what technological forces will help shape the organization’s future.

9 January 2019
Podcast

Addressing Tomorrow’s Threats Today

Threatcasting has indicated that IoT and AI are going to be some of the biggest security concerns in the future. But what can we do now to protect these home devices? And why does it matter if an Internet-connected appliance, like a smart coffee maker, is compromised?

20 November 2018
Podcast

COBIT’s Impact on the Governance Profession

ISACA’s COBIT framework has helped practitioners around the world better manage and govern their information and technology for more than two decades. In this ISACA 50th Anniversary series podcast, we examine the impact COBIT has made for governance professionals and how the framework has evolved, including the recent launch of COBIT 2019.

13 November 2018
Podcast

Why We Failed

A centralized security approach for distributed systems has left many organizations vulnerable to attacks. In this Knowledge Series podcast, we discuss the ways in which security professionals have “failed” during the move toward decentralized processing.

12 November 2018
Podcast

Examining the Facebook Breach

The recent Facebook data breach affected millions of users, and the way the exploit was carried out differed from many attacks in the past. In this security podcast, we discuss the Facebook security breach, how to respond to this kind of breach and the widespread impact this attack has.

10 October 2018
Podcast

Digital Transformation? Boards Are Not Ready for It!

Any enterprise that wants to remain competitive must have a strong board of directors leading it toward digital transformation. Unfortunately, boards of directors may not always be knowledgeable enough to promote digital transformation. In this podcast, we discuss why boards of directors may not be able to how to prepare boards to lead digital transformation efforts.

30 September 2018
Podcast

Making the Case for Workplace Gender Diversity

While many studies have shown the business benefits of gender diversity in the workforce, employees often are skeptical of the value of diversity, especially without strong sponsorship from the C-Suite. In this month’s ISACA SheLeadsTech podcast with guest Andrew McNeilis, chief commercial officer at Phaidon International, we look at recent research on this topic and explore strategies that can be deployed to strengthen organization-wide commitment to gender diversity.

17 September 2018
Podcast

Exploring a Fun Career in Cybersecurity

Cybersecurity can be a very fun career. Even those who do not have technical backgrounds can thrive in a cybersecurity role. In this podcast, we discuss what makes a cybersecurity career fun, how to begin a cybersecurity career and why the perception of cybersecurity careers is so important.

10 September 2018
Podcast

I Left My Security in the Office

Remote work is growing increasingly more common, and with good reason; it offers numerous benefits to enterprises that leverage it. But this new way of working also presents new security challenges. In this podcast, we discuss some of those challenges and how to combat them.

30 August 2018
Podcast

The Elevation of Cybersecurity to a Board-Level Imperative

Cybersecurity has found its way onto board agendas for enterprises across all industries throughout the world, yet remains a mighty challenge. In this ISACA 50th Anniversary series podcast, we examine how cybersecurity came to command such high-profile attention and what organizational leaders can do to improve cyber preparedness.

20 August 2018
Podcast

IoT, Machine Learning and Artificial Intelligence: Nothing to Fear

When some people think of machine learning and artificial intelligence, their thoughts go immediately to Skynet or devices taking over humankind. But machine learning and artificial intelligence can significantly improve the quality of everyone’s life, whether it be through applications at home or during medical procedures. In this security series podcast, we discuss machine learning and artificial intelligence and the benefits and challenges they pose.

10 August 2018
Podcast

How Women Can Capitalize on Opportunities in the Tech Workforce

While the disproportionately male nature of the tech workforce can be challenging for some women to navigate, many organizations are actively looking to bring more women into tech roles. In this ISACA SheLeadsTech Series podcast, we discuss how organizations can make those roles more appealing for women and why this might be a great time for women who are interested in joining the tech workforce.

20 July 2018
Podcast

The Promises and Jeopardies of Blockchain Technology

Blockchain technology has the potential to change every industry, from finance to healthcare. However, blockchain presents some risk, and enterprises need to consider this risk if they are thinking about adopting blockchain technology. In this podcast, we discuss the benefits of blockchain and some of the challenges that it may present.

20 July 2018
Podcast

The State of Cybersecurity

With the increasing number of connected devices, the need for skilled cybersecurity professionals is even greater. In this Security series podcast, we discuss the most common cybersecurity threats, the skills gap and how the skills gap can be remediated.

11 July 2018
Podcast

The Impact of Automation and Robotics

While there are concerns about the influence automation could have on the technology workforce, automation also can drive economic growth and create new types of technology jobs. In this ISACA 50th Anniversary Series podcast, we discuss the transformative impact of automation and robotics on the tech workforce and society in general.

18 June 2018
Podcast

Applying a Technological Integration

Innovation is required for any enterprise that wants to remain competitive. But how can innovation be balanced with other business goals? In this Knowledge Series podcast, we discuss the importance of innovation and a possible framework than can be leveraged to best utilize innovation.

18 May 2018
Podcast

Mentors and Role Models in the Tech Workforce

A shortage of role models was cited in ISACA research as one of the roadblocks for women in the technology workforce. In this podcast with guest Jan Babiak, we discuss some of the steps both women and men can take to empower female practitioners and enhance gender diversity.

18 May 2018
Podcast

Interview with Piotr and Matt Era

In this podcast, the president of the ISACA Warsaw (Poland) Chapter speaks with ISACA CEO Matt Loeb, CGEIT, CAE, FASAE, about the future of ISACA. Loeb also discusses the needs of ISACA members, GDPR preparation and how ISACA can best serve its diverse membership.

30 April 2018
Podcast

Reasonable Software Security Engineering

Threat modeling is becoming a valuable security tool, especially in light of GDPR. In this podcast, we discuss the importance of threat modeling and the first steps your enterprise can take to begin leveraging it.

29 March 2018
Podcast

Disaster Recovery Management in the Multimodal Era

The multimodal era of technology presents numerous benefits and challenges. In this podcast, we discuss what availability and disaster recovery management look like in the multimodal era.

29 March 2018
Podcast

Mistakes Happen—Mitigating Unintentional Data Loss

Data loss, whether intentional or accidental, is a concern for most enterprises, especially considering recent regulatory changes. In this podcast, we discuss ways to prevent data loss and how to address it if it happens.

1 February 2018
Podcast

Meltdown and Spectre Vulnerabilities

The recently discovered Meltdown and Spectre vulnerabilities affect nearly all computers and smart phones. In this podcast, we discuss these vulnerabilities, the responses to them and what you can do to be secure in light of this discovery.

8 January 2018
Podcast

Governance, Risk, Compliance and a Big Data Case Study

Leveraging big data correctly can help enterprises gain value. That happened at a major bank a few years ago, but the regulatory landscape has changed, and that affects the way enterprises handle big data. In this podcast, we discuss a big data case study and explore how it may have differed given today’s regulations.

19 December 2017
Podcast

Anatomy of an IoT DDoS Attack and Potential Policy Responses

Attacks in the Internet of Things are becoming more prevalent, and it is crucial to know how to address them. In this podcast, we will discuss what an IoT DDoS attack looks like and some policy responses that could address it.

14 December 2017
Podcast

Information Security in the Multi-Modal Era

As the traditional notion of a data center changes and enterprise data are being sent to numerous locations, the challenge of keeping data secure is evolving. In this edition of the ISACA Podcast, we discuss how to address security in a multi-modal era.

29 September 2017
Podcast

Social Media Rewards and Risk

Most enterprises use social media, and the use of these sites can help organizations be closer to their clients. But the use of social media also poses some threats to an organization. In this podcast, learn more about the benefits of social media, the risk associated with social media use and how to mitigate this risk.

3 July 2017
Podcast

Sustainability

It is becoming increasingly important for enterprises to implement sustainable practices. But how can enterprises strike a balance between profitability and sustainability? In this podcast, we discuss what green IT looks like, the business benefits of sustainability and the role of an auditor in a sustainable enterprise.

13 April 2017
Podcast

COBIT 5 Principles Where Did They Come From

COBIT 5, a framework for the governance and management of enterprise IT, is a valuable resource that leverages proven practices, global thought leadership and groundbreaking tools. In this podcast, we discuss the COBIT 5 principles, where they came from and how enterprises can leverage the framework.

23 February 2017
Podcast

Implementing the NIST Cyber Security Framework

The US National Institute of Standards and Technology’s Cybersecurity Framework can help enterprises secure their valuable information assets. The COBIT® 5 framework can be used to implement the NIST framework. In this podcast, we discuss the specific ways in which COBIT 5 can help enterprises that want to implement the Cybersecurity Framework.

23 February 2017
Podcast

The Automation Conundrum

The increasing proliferation of artificial intelligence systems presents many concerns. But not adopting AI systems could result in enterprises falling behind and missing key opportunities. In this podcast, we discuss AI threats, how to prevent these threats and the benefits of adopting AI systems.

23 February 2017
Podcast

The G7 and Cyber Security Podcast

A recent G7 meeting produced a document on cyber security, outlining international state cyber security behavior. While discussing cyber security at this level shows great progress, there is still room for growth. In this podcast, we discuss the G7 Principles and Actions on Cyber, why it is important, and areas for improvement.

23 February 2017
Podcast

Addressing Cybersecurity Vulnerabilities

Internet security is a growing concern and IT leaders need to increase public awareness of cyber security. Unchecked cyber security risk factors can greatly harm enterprises. In this podcast, we discuss areas for improvement that could prevent cyberattacks.

22 February 2017
Podcast

Are Software Flaws a Security Problem?

Who is responsible when customer-facing systems crash? Program crashes can cause security problems. In this podcast, we explore how many causes of unexpected downtime are the same as those that lead to security breaches.

22 February 2017
Podcast

Auditing Agile: A Brave New World Podcast

Auditing Agile can be difficult, but auditing Agile and Scrum artifacts can provide considerable value to an enterprise. In this podcast, we discuss how to audit Agile and the myriad benefits it can provide.

22 February 2017
Podcast

Balancing the Cybersecurity Battlefield

Cyber security is a priority for enterprises, but the skills shortage in security is a global concern. Women can provide a unique perspective on cyber security, but are still vastly underrepresented in information security. In this podcast, we discuss some of the challenges women in cyber security face and how to overcome these challenges.

22 February 2017
Podcast

Benefits and the Security Risk of Software-defined Networking

The growth in connected devices is increasing the difficulty of managing devices and related network traffic. Software-defined networking can make the process of managing these devices more efficient. In this podcast, we discuss the benefits and challenges associated with software-defined networking.

22 February 2017
Podcast

Challengeable Truths

There are many widely held information security beliefs, but do all of them hold true? In this podcast, we challenge some commonly held information security beliefs and explore whether or not they should be held as truths.

22 February 2017
Podcast

Chief Cyber Officer

Chief information security officers are typically thought of as being responsible for cyber security. But is this structural model the most effective way to manage cyber security? In this podcast, we discuss the merits of creating the role of chief cyber officer to deal with cyber security issues.

22 February 2017
Podcast

Cyber Privacy

Should cyberattacks be considered privacy violations? If cyberattacks are framed as privacy violations, the Generally Accepted Privacy Principles could be applied to cyberattacks. In this podcast, we use GAPP to provide insight on how privacy can be protected from cyberattackers.

22 February 2017
Podcast

Cybersecurity for a “Simple” Auditor

Because cyber security and information security are often conflated, their audit processes might also be conflated. Despite the lack of cyber security standards, it is possible to develop a cyber security audit process. In this podcast, we discuss the ways to develop a process for cyber security audits.

22 February 2017
Podcast

Cyberwhatsit

The word “cyber” is growing in usage, but there is a lack of verbal clarity with respect to what it actually means. This ambiguity can lead to uncertainty about how to handle cyberrisk. In this podcast, we discuss the definitions of cybertheft, cyberattacks, cyberthreats and cyber security and the implications of these definitions.

22 February 2017
Podcast

Frameworkers of the World, Unite II

How are organizations complying with the US National Institute of Standards and Technology Cybersecurity Framework? In this podcast, we look at the framework as though it were a standard to determine how organizations can adhere to it.

22 February 2017
Podcast

Performance Measurement Metrics for IT Governance

As technology evolves and transforms, enterprises rely more and more on technology resources and vendors. Because of this reliance, key performance indicators are necessary to measure the performance of IT service delivery. In this podcast, we discuss how to develop performance metrics, the criteria for good metrics and leveraging COBIT 5 to develop performance metrics.

22 February 2017
Podcast

Protecting Information - Practical Strategies for CIOs and CISOs

Information is one of the most valuable assets of every organization. Protecting information typically a high priority for chief information officers, but better protection is more likely if the CIO works with a chief information security officer. In this podcast, we discuss the role of the CIO and CISO and provide a management and reporting structure.

22 February 2017
Podcast

The Criticality of Security in the Internet of Things

The Internet of Things is evolving at a rapid pace, and it is becoming increasingly difficult to keep up with these “smart” devices. Because this technology is advancing so quickly, it is necessary to build security and privacy controls into connected devices. In this podcast, we discuss why these controls should be built in, how to incorporate security into device building and some of the barriers of developing with security in mind.

22 February 2017
Podcast

Three Ways to Simplify Auditing Software Security Requirements and Design

Building security into software is a prerequisite for information assurance, and it is far cheaper to fix a defect in design than to fix it after production. Auditors can play a role in ensuring security is built into software. In this podcast, we discuss the ways in which organizations can incorporate security into the software design process.

22 February 2017
Podcast

Unsung Security Heroes

Information security is no longer the sole responsibility of IT professionals. People across the enterprise contribute to keeping information safe. In this podcast, we discuss some roles that support information security, but are not typically thought of as security roles.

22 February 2017
Podcast

Weary Willie's Guide to Cyberrisk Management

Cyberrisk can never be eliminated, but it can be minimized so that it is more manageable. In this podcast, we discuss the professionals who should be involved with cyberrisk management and what effectively managed cyberrisk looks like.

22 February 2017
Podcast

Why Everyone Dislikes the IT Auditor and How to Change It

IT auditors have a very important role, but are often criticized by management or users of IT audit services. While some attitudes cannot be changed, auditors can work to gain the trust and respect of those whom they are auditing. In this podcast, we discuss some of the common critiques and how IT auditors can address these issues.

22 February 2017
Podcast

Stanley Baldwin’s Bomber

If organizations operate under British politician Stanley Baldwin’s declaration that “The bomber will always get through,” they can greatly improve their security posture. Assuming a breach will happen encourages organizations to build strong defensive measures. In this podcast, we discuss why organizations should assume attackers will always get in and steps they can take to remain strong in the event of a breach.

2 September 2015
Podcast

Microwave Software

Outdated legacy software remains in many organizations and can pose a substantial risk. Security patches often do not exist for them, and many enterprises forget these old programs still have access to critical systems. In this podcast, we discuss how you can address the security challenges old software poses to your organization.

2 January 2015
Podcast

Growing a Cybersecurity Career: Questions for the Job Interview

All job seekers, but especially those in cyber, should try to work for an organization that supports their professional growth. In this podcast, we discuss some questions to ask on a job interview to help you determine the growth potential of a role and if you can thrive at that enterprise.

11 December 2018