ISACA Podcast
- Folgen
- 100
- Erscheint
- alle zwei Wochen
- Letzte Folge
- 22. Okt. 2026
Über den Podcast
The ISACA Podcast gives you insight into the latest regulations, trends and threats experienced by information systems auditors and governance and security professionals. Whether you are beginning your career or have decades of experience, the ISACA Podcast can help you be better equipped to address industry challenges and embrace opportunities.
Folgen 100
30 Years of COBIT. One Global Framework. A Lasting Impact on IT Governance.
For three decades, COBIT has helped organizations around the world strengthen IT governance, manage risk, align technology with business objectives, and build digital trust. But how has this globally recognized …
Shownotes
For three decades, COBIT has helped organizations around the world strengthen IT governance, manage risk, align technology with business objectives, and build digital trust. But how has this globally recognized framework evolved, and what does its future look like in an era of rapid technological change?
Join Mark Thomas and a distinguished panel of experts from around the world as they celebrate 30 years of COBIT, reflecting on its evolution, global influence, and continued relevance in today's complex digital landscape.
From its beginnings as a collection of control objectives to its development into a comprehensive framework for enterprise governance of information and technology, COBIT has provided organizations with a common language for managing technology, strengthening accountability, and driving business value.
Through a global exchange of perspectives, this conversation explores how COBIT adapts to regional regulations and organizational needs while maintaining a consistent foundation for effective IT governance. Discover how the framework supports alignment with other standards, strengthens digital trust, and helps organizations navigate emerging technologies and evolving business challenges.
🌍 Explore key themes from the discussion:
🔹 30 Years of COBIT: Reflect on the framework's evolution and its lasting influence on IT governance worldwide.
🔹 A Global Perspective: Discover how organizations across different regions apply COBIT to address local regulations, business priorities, and governance challenges.
🔹 Building Digital Trust: Explore how effective governance frameworks support accountability, transparency, and confidence in technology.
🔹 Connecting Frameworks and Standards: Learn how COBIT provides a common foundation for aligning governance practices with other industry frameworks and requirements.
🔹 Looking Toward the Future: Explore COBIT's continued relevance as organizations navigate digital transformation, emerging technologies, and increasingly complex IT environments.
Meet the Moderator & PanelistsModerator:
Mark Thomas, CRISC, CGEIT, CDPSE, AAIR — COBIT Assessor, DTEF | ISACA Hall of Fame
Panelists:
• Leonard Ong, CISA, CISM, CRISC, CGEIT, CDPSE, AAIA, AAISM, AAIR, CSXP — COBIT Assessor | ISACA Hall of Fame
• Gabriela Reynaga Vargas, CISA, CRISC, CDPSE — COBIT Accredited Trainer
• Sanjay Verma, CISM, CISA, CGEIT, CRISC, COBIT, AAIA, AAISM, AAIR
• Greet Volders, CGEIT — COBIT Assessor
• Tichaona Zororo, CISA, CISM, CRISC, CGEIT, CDPSE — COBIT Assessor | ISACA Hall of Fame
Learn More & Stay Connected🌐 Explore COBIT from ISACA: Discover how COBIT helps organizations strengthen enterprise governance of information and technology, optimize performance, and create business value.
https://www.isaca.org/resources/cobit
💡 Explore More ISACA Insights: Access research, resources, and expert perspectives on governance, cybersecurity, risk, audit, digital trust, and emerging technologies.
https://www.isaca.org/resources
🎙️ Explore More ISACA Podcast Episodes: Hear conversations with industry leaders and experts shaping the future of technology, governance, and digital trust.
https://www.isaca.org/resources/news-and-trends/isaca-podcast-library
▶️ Subscribe to ISACA on YouTube: Stay connected with expert discussions, industry insights, professional development resources, and the latest conversations shaping the future of IT.
https://www.youtube.com/@IsacaHq
💬 Join the Conversation: How has COBIT influenced your organization's approach to IT governance? Share your experiences and insights in the comments!
👍 Like, comment, share, and subscribe for more expert perspectives on IT governance, digital trust, cybersecurity, risk, and emerging technologies.
#COBIT #COBIT30 #ITGovernance #DigitalTrust #EnterpriseGovernance #ISACA #DigitalTransformation
When Risks Can Think: Managing Risk and Compliance in the AI Era
AI is reshaping enterprise risk by introducing new concerns like drift, hallucination, model security, and expanded data use, while also amplifying existing operational and compliance challenges. Organizations …
Shownotes
AI is reshaping enterprise risk by introducing new concerns like drift, hallucination, model security, and expanded data use, while also amplifying existing operational and compliance challenges. Organizations are feeling growing pressure to move faster with AI, even as critical gaps in visibility, collaboration, and enforcement make governance harder to scale.
In this episode, ISACA’s Donnie Carpenter, Principal, Information Security and Professional Practices, Research Development, speaks with Michael Siegrist, Field CTO and Head of Americas Risk Solutions at OneTrust, about what an integrated approach to risk and compliance looks like in practice—from assessing AI across the IT ecosystem to prioritizing risk in ways that support business growth rather than stall innovation.
Michael unpacks how organizations can govern AI responsibly, translate emerging risks into enforceable controls, and build greater visibility across their risk landscape. Listeners will come away with a clearer framework for managing emerging AI risks while enabling innovation with greater confidence.
Related Resources & Stay ConnectedLearn More About OneTrust: Discover how OneTrust helps organizations manage risk, compliance, privacy, data, and AI governance while building greater trust across the enterprise.
OneTrustExplore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights.
ISACA Podcast LibrarySubscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights.
ISACA YouTube ChannelDon’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.
The New Rules of Governance: Achieving Continuous Compliance with Adaptive Identity
As AI shifts from a theoretical advantage to an operational reality, the race is on to define the rules of engagement. Yet, for enterprise leaders, the real dilemma isn’t just waiting for regulations to …
Shownotes
As AI shifts from a theoretical advantage to an operational reality, the race is on to define the rules of engagement. Yet, for enterprise leaders, the real dilemma isn’t just waiting for regulations to land—it’s realizing that static, point-in-time compliance is officially dead. To secure and govern a dynamic, AI-driven ecosystem, organizations must evolve from rigid access controls to a model of adaptive identity.
In this episode, ISACA’s Safia Kazi, Principal Research Analyst, Privacy, Research Development, speaks with Jeff Purrington, Identity Strategist at SailPoint, to cut through the compliance noise and explore how adaptive identity can act as a real-time control plane—allowing organizations to continuously assess risk, automate governance, and secure both human and non-human identities.Tune in to discover:
- The shift to adaptive governance: How to move from static, periodic compliance reviews to a continuous, real-time adaptive identity model that automatically aligns with evolving global regulations.
- Securing the non-human frontier: Proven strategies to apply adaptive controls to AI agents, machine identities, and automated service accounts, ensuring they remain compliant and visible.
- Audit-ready automation: Actionable steps to leverage identity security as a dynamic guardrail, allowing your organization to innovate rapidly with AI while staying continuously audit-ready.
Learn More About SailPoint: Discover how SailPoint helps organizations manage and secure identities, strengthen governance, and navigate the evolving demands of AI-driven enterprises.
SailPointExplore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights.
ISACA Podcast LibrarySubscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights.
ISACA YouTube ChannelDon’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.
Your Containers Are Probably Full of Holes: Fixing Docker Security with AI
Containers run much of the software we depend on, and many are shipped with security problems that no one noticed. Traditional container scanning tools can miss important vulnerabilities, insecure …
Shownotes
Containers run much of the software we depend on, and many are shipped with security problems that no one noticed. Traditional container scanning tools can miss important vulnerabilities, insecure configurations, embedded secrets, and risky Dockerfile patterns before they reach production.
In this episode, ISACA’s Adedayo Ojo, Principal, Emerging Technologies and Professional Practices, Research Development, speaks with Advait Patel, Senior Site Reliability Engineer at Broadcom, Docker Captain, and Google Developer Expert in Google Cloud, about why traditional container scanning misses so much and what it takes to identify the issues that matter most.
Advait shares lessons from running containers at scale on a large cloud platform and explains how he built DockSec, an open-source tool that uses AI to identify insecure Dockerfile patterns, embedded secrets, and misconfigurations that signature-based scanners tend to overlook. The conversation offers practical guidance that developers and security teams can apply immediately, along with an honest look at where AI can strengthen container security—and where it cannot.
Related Resources & Stay Connected
Explore DockSec on GitHub: Review the open-source DockSec project, explore its features, and learn how it uses AI to identify insecure Dockerfile patterns, embedded secrets, and container misconfigurations.
https://github.com/OWASP/DockSecLearn More About DockSec from OWASP: Discover more about the DockSec project, its approach to container security, and how it helps developers identify risks that traditional signature-based scanners may miss.
https://owasp.org/DockSec/Connect with Advait Patel on LinkedIn: Follow Advait for insights on container security, cloud infrastructure, site reliability engineering, Docker, and AI-powered security.
https://www.linkedin.com/in/advaitpatel93/Explore Advait Patel’s GitHub: View Advait’s open-source projects, technical work, and contributions to cloud and container security.
https://github.com/advaitpatelExplore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights.
https://www.isaca.org/resources/news-and-trends/isaca-podcast-librarySubscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights.
https://www.youtube.com/@IsacaHqDon’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.
Modern Approach to Identity Security
As threats have evolved, so too has the approach to modern identity security. A privilege-centric approach must be adopted to address this evolution. Identity management for all accounts within an organization …
Shownotes
As threats have evolved, so too has the approach to modern identity security. A privilege-centric approach must be adopted to address this evolution. Identity management for all accounts within an organization must mature to meet the demands of the cloud, nonhuman identities (NHIs), agentic AI, and modern attack vectors. Your strategy must now manage and mitigate not only traditional privileged access (root and administrator accounts), but also attacks targeting modern identities with paths to privileged access.
These paths to privilege remain one of the most valuable targets for cybercriminals because many organizations continue to defend their environments with fragmented or siloed security strategies and solutions. Security gaps and risks exist across endpoints, cloud environments, SaaS applications, third-party access, and now agentic AI and NHIs, making today's threat landscape more complex than ever.
In this episode, ISACA's Donnie Carpenter, Principal, Information Security and Professional Practices Research Development, speaks with Christopher Hills, Chief Security Strategist at BeyondTrust, about the evolution of identity security and why organizations must rethink how they protect privileged access in today's rapidly changing technology landscape.
Related Resources & Stay ConnectedLearn more about BeyondTrust: Discover how BeyondTrust helps organizations protect identities, manage privileged access, and reduce cyber risk across cloud, endpoint, SaaS, and hybrid environments.
BeyondTrustAdditional Resources from BeyondTrust:
- Shadow AI Governance: How to Detect Shadow AI Governance
- Microsoft Vulnerability Report: Microsoft Vulnerability Report
Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging technology insights.
ISACA Podcast LibrarySubscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights.
ISACA YouTube ChannelDon't forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, and risk.
ISACA Podcast: Why You Should Use the F Word More
FedRAMP 20x is redefining what federal compliance looks like. Designed to modernize the authorization process, this bold initiative is moving cybersecurity governance toward automation while reducing the …
Shownotes
FedRAMP 20x is redefining what federal compliance looks like. Designed to modernize the authorization process, this bold initiative is moving cybersecurity governance toward automation while reducing the lengthy timelines and documentation burdens that have traditionally defined FedRAMP.
Join host Safia Kazi as she speaks with Jake Bernardes, CISO at Anecdotes, about what FedRAMP 20x is, why it matters, and how this transformation will reshape governance, risk, and compliance (GRC) automation. Together, they explore what organizations can expect as federal compliance evolves and what the changes mean for enterprise customers navigating the future of cybersecurity governance.
Related Resources & Stay ConnectedLearn more about Anecdotes: Discover how Anecdotes is helping organizations transform governance, risk, and compliance with AI-powered automation, continuous monitoring, and audit-grade data that enables faster, smarter, and more scalable GRC programs. https://www.anecdotes.ai/
Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library
Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq
Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT and cybersecurity.
The Future of IT Audit: Key Changes in ITAF 5
Technology is transforming how organizations operate — and IT audit and assurance must evolve alongside it. In this episode, Paul Phillips sits down with Mary Carmichael, contributor to the newly updated IT …
Shownotes
Technology is transforming how organizations operate — and IT audit and assurance must evolve alongside it. In this episode, Paul Phillips sits down with Mary Carmichael, contributor to the newly updated IT Audit and Assurance Framework (ITAF 5), to discuss how audit professionals can adapt to today’s increasingly complex digital enterprise.
Together, they explore the major shifts shaping modern audit, including AI governance, digital ecosystems, automation, evolving risk landscapes, cloud environments, and the growing need for stronger data literacy within audit teams. Mary also shares practical guidance on how organizations can begin modernizing their audit approach without overhauling everything overnight.
Key discussion topics include:
- The evolution from traditional control testing to outcome-based assurance
- Why audit teams need stronger technology and data capabilities
- AI governance, automation, and digital risk considerations
- Building practical audit modernization strategies
- How ITAF 5 supports governance, credibility, and audit relevance in modern enterprises
Whether you're an auditor, governance professional, cybersecurity leader, or risk practitioner, this conversation provides valuable insight into the future of audit and assurance in a technology-driven world.
Related Resources & Stay Connected
Download ITAF 5: https://www.isaca.org/resources/itaf-is-a-framework
Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library
▶️Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq
🔔 Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT audit, governance, risk, and cybersecurity.
#ITAudit #ITAF5 #AuditAndAssurance #Cybersecurity #Governance #RiskManagement #AI #ISACA #DigitalTransformation #InternalAudit
Breaking the Compliance Mentality
In today’s evolving cybersecurity landscape, strong leadership is the foundation of an effective security posture. Yet many agencies struggle when a “compliance mentality” takes hold, where meeting minimum …
Shownotes
In today’s evolving cybersecurity landscape, strong leadership is the foundation of an effective security posture. Yet many agencies struggle when a “compliance mentality” takes hold, where meeting minimum requirements overshadows proactive risk management.
In this ISACA Podcast episode, Lisa Cook, ISACA's Principal Research Analyst, sits down with Patrick Bevill, Chief Information Security Officer (CISO) at the Federal Retirement Thrift Investment Board, to explore how agency leaders can establish a strong tone at the top and foster a culture that prioritizes security resilience over check-the-box compliance.
Related Resources & Stay Connected
Learn more about Williams Adley: Discover how Williams Adley helps organizations navigate audit, assurance, cybersecurity, risk, and advisory services with a focus on integrity and innovation. https://www.williamsadley.com/
Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library
Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq
Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT and cybersecurity.
Audit-Ready by Design: How AI Powers Smarter Identity Security
Compliance does not have to be a stressful, last-minute scramble. In this episode, we explore how AI-driven control and automation transforms identity security from a costly headache into an audit-ready …
Shownotes
Compliance does not have to be a stressful, last-minute scramble. In this episode, we explore how AI-driven control and automation transforms identity security from a costly headache into an audit-ready powerhouse. We break down the steps to simplify your regulatory processes, reduce operational costs, and enhance security by effectively managing human and non-human identities.
You will learn why gaining centralized visibility is your crucial first step, how to instantly spot and remediate risky orphan accounts, and the secret to running seamless, automated access certifications. Join our identity security experts as they share practical strategies to strengthen your defenses without draining your IT resources. Expect actionable tips that will help you build a sustainable, AI-powered compliance process tailored to your organization.
Related Resources & Stay Connected
- Learn more about SailPoint:
Explore how SailPoint is helping organizations modernize identity security, strengthen governance, and simplify compliance in an AI-driven world.
https://www.sailpoint.com/ - Explore More ISACA Podcast Episodes:
Dive deeper into cybersecurity, governance, risk, and emerging tech insights.
https://www.isaca.org/resources/news-and-trends/isaca-podcast-library - Subscribe to ISACA on YouTube:
Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights.
https://www.youtube.com/@IsacaHq
Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT and cybersecurity.
- Learn more about SailPoint:
SheLeadsTech Fireside Chat: Celebrating Women in Cybersecurity
Women in cybersecurity leaders share their stories and career advice in this SheLeadsTech fireside chat celebrating International Women’s Day. In celebration of International Women’s Day and Women’s History …
Shownotes
Women in cybersecurity leaders share their stories and career advice in this SheLeadsTech fireside chat celebrating International Women’s Day.
In celebration of International Women’s Day and Women’s History Month, ISACA’s SheLeadsTech initiative brings together three inspiring leaders in cybersecurity for a special fireside conversation.
Join Debbie Lew and Jo Stewart-Rattray, both ISACA Hall of Fame inductees and recipients of the Eugene Frank Founders Award, as they sit down with Gail Coury, who will be inducted into the ISACA Hall of Fame in 2026.
In this warm and engaging discussion, they reflect on their journeys into cybersecurity, the evolving role of women in technology, and the power of mentorship, leadership, and community in shaping the future of the profession.
In this episode, they discuss:
• Their personal paths into cybersecurity and IT
• How opportunities for women in tech have evolved over time
• Lessons learned from leadership and service within the ISACA community
• Advice for the next generation of women entering the fieldThe conversation wraps up with a fun rapid-fire round that offers a glimpse into the personalities behind these accomplished careers.
Whether you're an experienced professional or just beginning your journey in technology, this fireside chat offers inspiration, insight, and encouragement from women helping shape the future of cybersecurity.
🔗 Learn more about ISACA’s SheLeadsTech initiative:
https://www.isaca.org/membership/sheleadstech🎧 Explore more ISACA Podcasts:
https://www.isaca.org/resources/news-and-trends/isaca-podcast-library📺 Subscribe to ISACA on YouTube:
https://www.youtube.com/@IsacaHq#WomenInCybersecurity
#SheLeadsTech
#WomenInTechHumans Are IT Security’s Weakest Link
On this episode of the ISACA Podcast, host Chris McGowan is joined by Amit Patel, Senior Vice President at Consulting Solutions, to explore one of the most underestimated threats in cybersecurity: the human …
Shownotes
On this episode of the ISACA Podcast, host Chris McGowan is joined by Amit Patel, Senior Vice President at Consulting Solutions, to explore one of the most underestimated threats in cybersecurity: the human element. From accidental errors to insider breaches, they discuss why employee behavior is at the heart of most security incidents—and what organizations can do about it. Amit shares insights on how ongoing training, strong policies, and AI-powered tools like behavior analytics can help bridge the gap between tech and human responsibility. Whether you're a cybersecurity leader or simply navigating today’s digital landscape, this episode offers practical strategies to strengthen your organization’s human-centric security posture.
📚 Related Resources & Stay Connected📖 Read the full article:
Humans Are IT Security’s Weakest Link
https://www.isaca.org/resources/news-and-trends/industry-news/2024/humans-are-it-securitys-weakest-link🎙 Explore More ISACA Podcast Episodes:
Dive deeper into cybersecurity, governance, risk, and emerging tech insights.
https://www.isaca.org/resources/news-and-trends/isaca-podcast-library▶️ Subscribe to ISACA on YouTube:
Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights.
https://www.youtube.com/@IsacaHq🔔 Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT and cybersecurity.
Secure Your Privacy: A security and privacy podcast: real conversations, real consequences, real solutions?
You’re listening to Secure Your Privates™ brought to you by ISACA Podcasts - where security meets privacy, risk meets reality, and governance finally makes sense. We’re here to cut through the noise and get …
Shownotes
You’re listening to Secure Your Privates™ brought to you by ISACA Podcasts - where security meets privacy, risk meets reality, and governance finally makes sense. We’re here to cut through the noise and get real about what’s actually happening in cyber. The no-BS podcast on security and privacy. We talk about what’s broken, what’s working, and what nobody’s telling you in between.
Securing Data in the Age of AI with DSPM: Lessons from a High-Impact ISACA Webinar
In this ISACA Podcast episode, host Safia Kazi, Principal Research Analyst – Privacy, is joined by Dirk Schrader, VP of Security Research at Netwrix, to discuss how generative AI is revealing long-standing gaps …
Shownotes
In this ISACA Podcast episode, host Safia Kazi, Principal Research Analyst – Privacy, is joined by Dirk Schrader, VP of Security Research at Netwrix, to discuss how generative AI is revealing long-standing gaps in enterprise data security and governance.
This episode builds on insights from a recent ISACA webinar that explored how generative AI is exposing weaknesses in enterprise data security and governance. The discussion examines why many organizations lack visibility into where sensitive data resides and who can access it, particularly across hybrid and cloud environments. The conversation also addresses emerging risks introduced by AI tools, including non-human access and overexposed data. Listeners will gain practical, governance-focused guidance on how DSPM helps organizations assess risk, support compliance, and prepare data responsibly for AI initiatives.
Related Resources:
Watch the ISACA Webinar from the ISACA Virtual Summit 2025: “Securing Data in the Age of AI with DSPM”
https://www.isaca.org/training-and-events/online-training/virtual-summits/ai-governance-strategiesLearn more from Netwrix:
https://netwrix.com/en/resources/Explore more ISACA Podcasts:
https://www.isaca.org/resources/news-and-trends/isaca-podcast-libraryISACA on YouTube:
https://www.youtube.com/@IsacaHq
Elevate Your Career with Lauren Hasson
Lauren Hasson is the Founder of DevelopHer, an award-winning career development platform. In this podcast, she'll share a bit about her background and give a sneak peek at her upcoming CPE-eligible event.
Cyberrisk Quantification: Strengthening Financial Resilience
In this episode, ISACA's Lisa Cook engages with Yakir Golan, Executive Officer (CEO) and Co-Founder of Kovrr, to explore the critical role of Cyberrisk Quantification (CRQ) in enhancing organizational financial …
Shownotes
In this episode, ISACA's Lisa Cook engages with Yakir Golan, Executive Officer (CEO) and Co-Founder of Kovrr, to explore the critical role of Cyberrisk Quantification (CRQ) in enhancing organizational financial resilience. They discuss how CRQ solutions provide objective assessments of an organization's cybersecurity posture, enabling leaders to make informed decisions that align risk mitigation strategies with business objectives. The conversation also highlights the importance of translating cyberrisk exposure into monetary terms to facilitate high-level discussions and protect shareholder confidence.
Listen & Subscribe Catch this episode—and more—on the ISACA Podcast Library: https://www.isaca.org/resources/news-and-trends/isaca-podcast-libraryor on your favorite podcast platform.
Securing Desktops and Data from Ransomware Attacks
Ransomware remains one of the most formidable cybersecurity threats facing organizations worldwide. In this episode of the ISACA Podcast, host Chris McGowan speaks with Netwrix endpoint protection expert Jeremy …
Shownotes
Ransomware remains one of the most formidable cybersecurity threats facing organizations worldwide.
In this episode of the ISACA Podcast, host Chris McGowan speaks with Netwrix endpoint protection expert Jeremy Moskowitz, who explains how ransomware infiltrates and cripples desktop environments. He explains cybercriminals' tactics to exploit social engineering and system misconfigurations to gain unauthorized access, offering actionable insights on the most effective prevention and mitigation strategies.
Additionally, Jeremy delivers practical advice that security teams can use to resist ransomware. He shares tips on safeguarding locally stored data, implementing robust backup solutions, enforcing strict access controls and system patching, and educating staff on common red flags associated with ransomware.
Listen & Subscribe to ISACA Podcast
Catch this episode—and more—on the ISACA Podcast Library
or on your favorite podcast platform.Connect & Learn More about Netwrix
- Netwrix Data Loss Prevention Solution: Learn more
- Follow Netwrix on LinkedIn: Netwrix Corporation: Posts | LinkedIn
- Additional Resources Provided by Netwrix:
Cyberresilience and Cybersecurity
Cybersecurity and the role of internal audit, an urgent call to action: The forces driving business growth and efficiency contribute to a broad attack surface for cyber assaults. How is the end user protected …
Shownotes
Cybersecurity and the role of internal audit, an urgent call to action: The forces driving business growth and efficiency contribute to a broad attack surface for cyber assaults. How is the end user protected with good service while not being compromised?
- First Line includes internet, cloud, mobile, and social technologies, now mainstream, are platforms inherently oriented for sharing. Outsourcing, contracting, and remote workforces are shifting operational control.
- Second line includes information and technology risk management leaders who establish governance and oversight, monitor security operations, and take-action as needed, often under the direction of the chief information security officer (CISO)
- Third line of cyber defense—independent review of security measures and performance by the internal audit function. Internal audit should play an integral role in assessing and identifying opportunities to strengthen enterprise security. At the same time, internal audit has a duty to inform the audit committee and board of directors that the controls for which they are responsible are in place and functioning correctly, a growing concern across boardrooms as directors face potential legal and financial liabilities.
Cybersecurity Predictions for 2025
The prevalence of ransomware and the security concerns associated with AI have made the role of cybersecurity professionals vital for enterprise success. The complex security landscape can make cybersecurity …
Shownotes
The prevalence of ransomware and the security concerns associated with AI have made the role of cybersecurity professionals vital for enterprise success. The complex security landscape can make cybersecurity jobs stressful, but enterprises can take steps to retain cybersecurity talent and ensure enterprise assets are protected. In this podcast, Justin Rende, founder and CEO at Rhymetec, shares insight on the top concerns for cybersecurity professionals, the most in-demand skills, and the impact of AI on cybersecurity.
Examining Authentication in the Deepfake Era with Dr. Chase Cunningham
Given the dynamic nature of cyberthreats and the ever-expanding digital ecosystem, authentication is more critical than ever. In this episode, ISACA director of professional practices and innovation discusses a …
Shownotes
Given the dynamic nature of cyberthreats and the ever-expanding digital ecosystem, authentication is more critical than ever. In this episode, ISACA director of professional practices and innovation discusses a new content piece titled, "Examining Authentication in the Deepfake Era" with author Dr. Chase Cunningham. Their conversation of the paper explores the evolution, current state, and future trajectory of authentication technologies.
Safely and Responsibly Using Emerging Health Technology
Emerging healthcare technologies have the potential to revolutionize healthcare and accessibility-related concerns, but these advancements are not without risk. To maximize the value and minimize the harms …
Shownotes
Emerging healthcare technologies have the potential to revolutionize healthcare and accessibility-related concerns, but these advancements are not without risk. To maximize the value and minimize the harms associated with emerging health technologies, it is critical to address ethical, privacy, and societal concerns to ensure that these technologies help rather than hurt humanity.
In this ISACA Podcast, join Safia Kazi and Collin Bedder as they explore the applications and risks associated with emerging healthcare technologies.
Addressing SAP Security Gaps
SAP systems are treated differently than many other enterprise applications from a cybersecurity perspective. Most SAP security teams are siloed and left to meet security objectives on their own. Since SAP is …
Shownotes
SAP systems are treated differently than many other enterprise applications from a cybersecurity perspective. Most SAP security teams are siloed and left to meet security objectives on their own. Since SAP is so integral to organizations, it is unusual for SAP security objectives to not be on the radar of an existing 24/7 cybersecurity team executing response actions for Linux or Microsoft environments. SAP teams must be integrated w
SAP systems are treated differently than many other enterprise applications from a cybersecurity perspective. Most SAP security teams are siloed and left to meet security objectives on their own. Since SAP is so integral to organizations, it is unusual for SAP security objectives to not be on the radar of an existing 24/7 cybersecurity team executing response actions for Linux or Microsoft environments. SAP teams must be integrated with other cybersecurity groups within an organization to empower them with a security approach that unifies the entire enterprise landscape.
A chief information security officer (CISO) has many priorities, but when it comes to SAP environments, CISOs must fully understand how SAP applies to the IT enterprise and organizational environment to help them achieve all security goals. In addition, CISOs need to know their SAP team members personally so they can integrate them rather than contain them in silos. Finally, SAP must be secured to the same degree as other enterprise applications. When there is a Linux, Microsoft, or even a hybrid cloud incident, cybersecurity teams have a detailed plan of action upon which they are ready to act. SAP requires high-level consideration, or critical elements of the business will be vulnerable to malicious cyber actors—with no apparent response.
What Enterprises Need to Know About ChatGPT and Cybersecurity
Many people are pondering whether generative artificial intelligence (AI) tool ChatGPT is a friend or a foe. In this ISACA podcast episode, Camelot Secure Director of Solutions Engineering Zachary Folks …
Shownotes
Many people are pondering whether generative artificial intelligence (AI) tool ChatGPT is a friend or a foe.
In this ISACA podcast episode, Camelot Secure Director of Solutions Engineering Zachary Folks discusses not only his view of how ChatGPT can be considered an evolution of the encyclopedia, but importantly how it is aiding cybersecurity professionals and the overall goal of enterprise security, as well as how cybercriminals who want to exploit it can leverage it as well. He believes the world is entering a time when AI is fighting AI, and security professionals must focus on feeding ChatGPT technology more relevant data faster than the adversary. Folk also addresses how AI is affecting social engineering and his predictions for upcoming AI developments.
The Cyber Standard Podcast - Episode 4
Welcome to Episode 4 of "The Cyber Standard Podcast"! Join host Ameet Jugnauth, Vice President of the London Chapter of ISACA, as he delves into the world of cybersecurity standardization. In this episode …
Shownotes
Welcome to Episode 4 of "The Cyber Standard Podcast"!
Join host Ameet Jugnauth, Vice President of the London Chapter of ISACA, as he delves into the world of cybersecurity standardization. In this episode, titled "Becoming a License Body," Ameet is joined by esteemed guests Bryan Lillie, Strategic Technical Lead at the UK Cyber Security Council, and Peter Leitch, Co-Founder and Managing Partner at ANSEC. Together, they explore the intricacies of licensed bodies in shaping the cyber profession. Don't miss this insightful conversation!
Explore Further:
Delve deeper into the subject with additional resources provided in the episode description.
The Cyber Standard Podcast - Episode 3
Welcome to Episode 3 of "The Cyber Standard Podcast"! Join host Ameet Jugnauth, Vice President of the London Chapter of ISACA, as he delves into the essential aspects of applying for and assessing candidates in …
Shownotes
Welcome to Episode 3 of "The Cyber Standard Podcast"!
Join host Ameet Jugnauth, Vice President of the London Chapter of ISACA, as he delves into the essential aspects of applying for and assessing candidates in the cybersecurity field. In this episode, titled "How to Apply," Ameet is joined by distinguished guests Ethan Duffell, representing the UK Cyber Security Council, and Allan Broadman, Director of CyberAdvisor London. Together, they shed light on the launch of specializations and the significance of professional standards in the cybersecurity sector. Don't miss this insightful conversation!
Explore Further:
Delve deeper into the subject with additional resources provided in the episode description.
Effective Third Party Risk Management in 2024: AI’s Impact and Future Trends
Traditional security questionnaires just aren't cutting it anymore. Tune into this ISACA Podcast episode, Chris McGowan chats with VISO TRUST CEO and Co-founder, Paul Valente as they delve into the evolving …
Shownotes
Traditional security questionnaires just aren't cutting it anymore.
Tune into this ISACA Podcast episode, Chris McGowan chats with VISO TRUST CEO and Co-founder, Paul Valente as they delve into the evolving landscape of Third-Party Risk Management (TPRM), exposing the limitations of current methods and exploring how emerging AI trends are shaping a more secure future and driving more effective third-party risk management programs.
To learn more about VISO Trust please go to https://visotrust.com/
Unlocking Strategic Value from a Bug Bounty Program
Are you curious about how to maximize the strategic value and impact of your bug bounty program? In this episode, you can learn how Adobe continuously develops and improves its bounty program to engage security …
Shownotes
Are you curious about how to maximize the strategic value and impact of your bug bounty program?
In this episode, you can learn how Adobe continuously develops and improves its bounty program to engage security researchers and hackers globally and improve its security posture from an adversary perspective.
In this ISACA Podcast, Chris McGown, ISACA's Information Security Professional Practices Principal, chats with Alex Stan, Product Security Engineer and member of the Product Security Incident Response Team (PSIRT), discusses the value of bug bounty programs and shares how you can develop a metrics-driven approach to enhance the internal security testing and detection capabilities of your organization.
Explore Further: Delve deeper into the subject with additional resources
https://blog.developer.adobe.com/adobe-recap-2023-ambassador-world-cup-final-four-df701e1a1b12
The Cyber Standard Podcast - Episode 2
Welcome to Episode 2 of "The Cyber Standard Podcast"! Join host Ameet Jugnauth, Vice President of the London Chapter of ISACA, as he delves into the intricacies of cybersecurity standardization. In this …
Shownotes
Welcome to Episode 2 of "The Cyber Standard Podcast"!
Join host Ameet Jugnauth, Vice President of the London Chapter of ISACA, as he delves into the intricacies of cybersecurity standardization. In this episode, titled "Audit and Assurance," Ameet is joined by esteemed guests Leanne Sperry, Project Manager for Standards Development at the UK Cyber Security Council, and Mike Hughes, the ISACA Immediate Past President for ISACA Central UK. Together, they explore key challenges, lessons learned, and insights from related workshops in the realm of Audit and Assurance. Don't miss this insightful conversation!
Explore Further:
Delve deeper into the subject with additional resources provided in the episode description.
The Cyber Standard Podcast - Episode 1
Tune in to the inaugural episode of "The Cyber Standard Podcast," “The Vision!” Join host Ameet Jugnauth as he interviews Robin Lyons, ISACA Principal, IT Audit Professional Practices, and Annmarie Dann …
Shownotes
Tune in to the inaugural episode of "The Cyber Standard Podcast," “The Vision!”
Join host Ameet Jugnauth as he interviews Robin Lyons, ISACA Principal, IT Audit Professional Practices, and Annmarie Dann, Director of Professional Standards at the UK Cyber Security Council, in a compelling discussion about the standardization of specialisms in cybersecurity. Explore the Council's and ISACA's visions for the future, the significance of the Audit & Assurance specialism, and the collaborative efforts between the two organizations. Don't miss this insightful conversation that sets the stage for the podcast's journey into the world of cybersecurity standardization.
Explore Further: Delve deeper into the subject with additional resources provided in the episode description.
Measuring Security Risk Against Dynamic Threats
Getting dressed is a routine example of everyday life packed with choices. Should I wear pants or shorts? Do I need a sweater? Shoes or sandals? While we often make these choices subconsciously, even actions …
Shownotes
Getting dressed is a routine example of everyday life packed with choices. Should I wear pants or shorts? Do I need a sweater? Shoes or sandals? While we often make these choices subconsciously, even actions that don’t appear as choices include several microscopic risk-based calculations.
These judgments are executed based on some estimate of risk, and as known in the cybersecurity industry, what is believed to be safe today may no longer be safe tomorrow (or possibly even within the hour). Given this unique challenge, how do you establish a process that allows you to identify, analyze, prioritize, and treat security risks that are constantly evolving and where the threat is persistently adapting?
In this podcast, ISACA's Lisa Cook discusses with Adobe's Matt Carroll, Senior Manager of Technology Governance, Risk, and Compliance the risk methodology and practices his team has developed at Adobe that have helped the company rapidly measure security risk in a constantly changing landscape.Reflecting on 25 Years of Information Security Matters
ISACA recently marked the 25th anniversary of Steve Ross’ ISACA Journal Information Security Matters column. Over the last quarter century, technology, security, and the workforce have evolved, while certain …
Shownotes
ISACA recently marked the 25th anniversary of Steve Ross’ ISACA Journal Information Security Matters column. Over the last quarter century, technology, security, and the workforce have evolved, while certain challenges remain the same.
In this ISACA Podcast episode, Safia Kazi speaks to Steve about how he started writing for the Journal, societal shifts in security perceptions, and how writing skills are invaluable for anyone in the security industry.
Hier stehen die neuesten 40 von 100 Folgen. Ältere Folgen findest du im Feed des Podcasts.
Ähnliche Podcasts
Mehr Nachrichten-Podcasts
Ist das dein Podcast?
Bestätige es mit einem Eintrag in deinem Feed: Du bekommst hier einen Code, trägst ihn als podcast:txt in den Kanal deines Feeds ein, und wir prüfen ihn. Danach steht dein Podcast als „verifiziert“ bei SoundNode.