Home / Resources / News and Trends / Industry News / 2020

Domain:

More Filters
Card List
Muhammad Asif Qureshi
Privacy Article

Privacy During a Pandemic

It will soon be one year since the first case of COVID-19 was reported. Ever since that first case, governments, healthcare providers and pharmaceutical companies have been under constant pressure to find a vaccine for this virus.

18 December 2020
Gabriel Cusu
Governance Article

The Role of IT Governance During the COVID-2019 Pandemic

It is likely that 2020 will remain in history as the year of COVID-19. The virus has changed everything, affecting personal and professional lives across the globe. Organizations have had to change their ways of working, and as a result, many more people are now working remotely to adhere to social distancing protocols.

16 December 2020
Isaac Kohen
Privacy Article

Why Employee Privacy Matters More Than Ever

For organizations and their employees, 2020 is a uniquely transformative and challenging year. Although this reality is expressed in many ways—including a global pandemic, a deep economic recession, perpetual social unrest and a litany of natural disasters...

14 December 2020
Jon Brandt
Security Article

When Worlds Collide

This year will likely be remembered unfavorably by most people due to the multitude of hardships, losses and inconveniences associated with the COVID-19 pandemic.

11 December 2020
Rajiv Raghunarayan
Security Article

Harnessing Zero Trust Security

Cybersecurity is awash with acronyms, jargon and marketing slogans. Yet, history and headlines demonstrate the ongoing success of adversaries and tell us a different story. Zero trust security offers promise but is largely misunderstood and perceived as yet another overly-hyped buzzword.

8 December 2020
Surendra Nidar
Governance Article

The Role of IT Governance in Addressing Pandemic-Related Cyberrisk

The entire world is now grappling with the COVID-19 pandemic, which is turning out to be not only a massive health challenge, but also one of the most enormous economic challenges in recent history. With every passing day, thousands of positive cases are added to the already huge number of active cases.

7 December 2020
Scott C. Algeier
Security Article

Why You Need to Take Cybersecurity Seriously in the New Year

Today’s cyberthreats are more complex and severe than ever. The risk to organizations of all sizes has never been greater. As we begin 2021, it is important to reflect on the state of cyberthreats so that organizations can better secure themselves.

2 December 2020
Andrea Tang
Privacy Article

Privacy Governance and Privacy Engineering in the Cloud

In the light of digital transformation, cloud computing has become widely adopted. The separation of ownership, management and usage rights of resources increases the possibility and severity of privacy risk in the cloud.

30 November 2020
CISO Burnout
Security Article

Understanding and Addressing CISO Burnout

The job of a chief information security officer (CISO) is notoriously grueling. CISOs often only remain in their roles for a year or two, with high stress levels and unrealistic organizational expectations among the leading factors that drive CISOs from the job.

18 November 2020
Daimon Geopfert
The Nexus Article

The Cybersecurity Implications of an Evolving Work Environment

It is an understatement to say that COVID-19 has forced significant changes in how most organizations operate today.

16 November 2020
Guy Pearce
Privacy Article

Three Ways Your Approach to Privacy Is at Risk

At the federal (or national) level, the risk associated with outdated privacy laws has received good coverage. What has received less coverage is how outdated—and, therefore, risky...

13 November 2020
Victor Antonio Jimenez
Governance Article

COBIT Resource Optimization Mapped to TOGAF’s Architecture Review Board

Several years ago, the IT department of the largest bakery factory in the world conducted a COBIT® 5 assessment and implementation of enterprise governance as presented in the article, “A Partial Transition to COBIT 5 Demonstrates Value to IT.”

9 November 2020
CCP
Security Article

Top Cyberattacks of 2020 and How to Build Cyberresiliency

Cyberattacks rank as the fastest growing crime in the US, causing catastrophic business disruption. Globally, cybercrime damages are expected to reach US $6 trillion by 2021.

6 November 2020
Ali Pabrai
The Nexus Article

Getting Started With CMMC, a US DoD Mandate for Cybersecurity

On 31 January 2020, the US Department of Defense (DoD) introduced a new cybersecurity standard, the Cybersecurity Maturity Model Certification (CMMC).1 Every cybersecurity and compliance professional, including senior executives, must raise their awareness of this important and valuable cybersecurity standard developed by the DoD.

2 November 2020
Leveraging COBIT 2019 to Face the Challenge of Digital Transformation in Small Enterprises
Governance Article

Leveraging COBIT 2019 to Face the Challenge of Digital Transformation in Small Enterprises

Information is a key resource for all organizations, regardless of their size. It is created, used, retained, disclosed and destroyed. Technology plays a key role in these activities. Both information and technology (I&T) have become an integral part of all aspects of personal and enterprise life.

26 October 2020
Diana L. Burley
The Nexus Article

Treat the Whole Patient: Cybersecurity Amid COVID-19

Treat the whole patient. Public health practitioners have long known that the symptoms a patient presents in the doctor’s office tell only a portion of the story.

26 October 2020
Syed Salman
Governance Article

Digital Transformation Realized Through COBIT 2019

There is an understanding that is spreading quickly throughout the world: The COVID-19 pandemic has shut down much of the physical world temporarily and the resulting void will be filled by the digital world permanently.

13 October 2020
Jon Brandt
The Nexus Article

Cybersecurity Awareness: Progress or Passivity?

October is Cybersecurity Awareness Month (CSAM), created 17 years ago as a public-private partnership to ensure individuals have the proper resources for online safety. CSAM 2020’s overarching theme is “Do Your Part. #BeCyberSmart” aimed at empowering...

12 October 2020
Benjamin Scribner
The Nexus Article

Take Action for Cybersecurity Awareness Month

With so much of our lives taking place online these days, wouldn’t it be great if there was a time of year that was dedicated to cybersecurity? The good news: There is.

5 October 2020
Pritesh Parekh
The Nexus Article

Secure Cloud Migration Starts With Trust

Several years ago, discussions with IT organizations tended to revolve around convincing skeptics to move to the cloud. This is no longer the case. Over time, those discussions evolved because IT leaders grew to understand the clear value of adopting cloud.

28 September 2020
Mark T. Edmead
Governance Article

Using COBIT 2019 to Plan and Execute an Organization’s Transformation Strategy

COBIT is an IT governance and management framework designed to help organizations create value from their IT initiatives, better manage their risk and optimize resources.

28 September 2020
Adam Cason
The Nexus Article

A Green Eggs and Ham Guide to Securing Your Critical Infrastructure

Whether your data are in a box, with a fox, in a house, with a mouse, on a train, in the rain, in a car or on a boat... Wherever the critical data that you manage are located—which brings to mind the Dr. Seuss book Green Eggs and Ham...

14 September 2020
Ali Pabrai
The Nexus Article

COVID-19 Cyberattacks Require Businesses to Prioritize Cyberresilience

Businesses and end users are being targeted to download COVID-19 ransomware malware disguised as legitimate applications. We are witnessing an increase in phishing attacks that then lead to ransomware events by using COVID-19 as bait to mislead employees and customers.

14 September 2020
Dušan Žikić
Governance Article

COBIT and IT Audit—A Partnership for Eternity

The first time I heard about COBIT was almost 10 years ago, as I was starting out as an IT internal audit intern. Since then, I have been using COBIT for various aspects of IT audit, including developing IT audit plans, planning and performing IT audit engagements...

8 September 2020
Oluwaseyi Ojo
Governance Article

Achieving Operational Excellence Using COBIT 2019

Imagine the last time you went on vacation or a business trip to another city or country. You had a reservation for a rental car, and when you arrived at your destination airport and went to the rental car desk, you saw a lot of people waiting to be assisted.

24 August 2020
Greet Volders
Governance Article

How to Downsize the Cost of Compliance

The technological developments of the last decades offer organizations many opportunities and possibilities to expand their product portfolio and offer their services in new ways. This requires them to determine how to evolve from paper and manual management to create...

10 August 2020
Paul Lucier
The Nexus Article

Six Steps to Start Readying for Quantum

On the not-too-distant horizon are quantum computers. They will be capable of so much, including the ability to break the cryptography underlying public key infrastructure (PKI). This creates an unprecedented problem for the encryption and authentication that enterprises put their trust in today.

10 August 2020
Jon Brandt
The Nexus Article

Stepping Out From the Shadows

As a remote employee and IT professional, the pandemic has only minimally affected my professional life. I wake up each day and go about my routine to provide for my family and, ideally, positively influence the cybersecurity career field, enabling those of you on the frontlines working hard to support your respective enterprises to survive another day in the midst of a dynamic threat environment.

10 August 2020
Emeka Elue
Governance Article

Effective Capability and Maturity Assessment Using COBIT 2019

COBIT provides guidance to assist enterprises in making key governance system design decisions to successfully achieve enterprise goals and objectives. This is accomplished by focusing on objectives specific to both the governance and management components of a governance system. Organizations vary in how they approach, design and define the parameters for how governance and management operate within an enterprise.

27 July 2020
Graciela Braga
Governance Article

COBIT 2019 and the IIA 2019 Guiding Principles of Corporate Governance

2019 was a very productive year for corporate governance. ISACA completed the publication of COBIT 2019, a master framework internationally recognized for the governance and management of enterprise information and technology...

13 July 2020
Donald R. Owens
The Nexus Article

Ignoring Indiscernible Threats Is No Longer an Option

Why have many internal audit (IA) functions failed to drive the type of value stakeholders expect? The question provokes varying responses. Assertions that IA frequently raises in its defense are...

13 July 2020
Blake Curtis
Governance Article

The Value of IT Governance

Ineffective governance has a substantial impact on business alignment and risk management. Misalignment can result in improper identification of sensitive data, critical services and substandard security controls.

29 June 2020
Sunil Sheen
Governance Article

Communicating the Value of IT Governance

A network patch management tool to be procured is often seen mainly as an expense by the finance department and, therefore, queried subjectively or even rejected.

15 June 2020
Jon Brandt
The Nexus Article

Hacking the Experience Requirement

In April 2020, I penned a column titled “Qualifying the Skills Gap” which arose from ISACA’s findings in the State of Cybersecurity 2020, Part 1: Global Update on Workforce Efforts and Resources report and discussed the need to dissect the skills gap.

8 June 2020
Adam Cason
The Nexus Article

Is Your Security Scalable?

The ability to scale infrastructure and systems to match growth rates, increased workloads, market demands and spikes is critical. This has been tested in recent months with the hyper growth of video conferencing platforms such as Zoom and online shopping...

8 June 2020
Avinash Kadam
Governance Article

Evaluating Business Service Continuity and Availability Using COBIT 2019

COBIT 2019’s enterprise goal EG06 Business service continuity and availability must be foremost in everyone’s mind today due the ongoing pandemic situation. It is important to identify the critical components that need to be evaluated to assess the preparedness of an organization toward business service continuity and availability.

1 June 2020
John E. Jasinski
Governance Article

Brainstorms and Commentary for Using COBIT

This is an exercise in providing creative brainstorm references for using COBIT content to support digital business governance and management activities. It is important to keep in mind that COBIT is a reference model to be used as you see fit. It is the user’s choice as to how to use it—a little or a lot, for comparison or as reference.

18 May 2020
Cybersecurity
The Nexus Article

Identifying APTs Through Healthy Network Testing

Cybersecurity threats are often perceived as obviously and immediately disruptive to an organization’s operations. But more subtle threats can be equally debilitating.

11 May 2020
Peter C. Tessin
Governance Article

COBIT Tool Kit Enhancements

The COBIT Tool Kit has a number of resources to aid practitioners, including an overview, an executive summary, frequently asked questions (FAQs), a listing of the governance and management objectives in spreadsheet format, and more.

4 May 2020
K. Harisaiprasad
Governance Article

COBIT 2019 and COBIT 5 Comparison

COBIT is a broad and comprehensive framework that has been developed to support understanding, designing and implementing the management and governance of enterprise IT (EGIT).

27 April 2020
Governance
Governance Article

How COBIT 2019 Supports the Brazilian GDPR

The General Personal Data Protection Act (LGPD) is the Brazilian law that regulates the processing of personal data. It was sanctioned on 14 August 2018 and entered into force 18 months after its publication.

13 April 2020
Jon Brandt
The Nexus Article

Qualifying the Skills Gap

In February 2020, ISACA released its State of Cybersecurity 2020, Part 1: Global Update on Workforce Efforts and Resources report. This paper reports on data collected in Q4 2019, and it is similar to the series of reports on the state of cybersecurity issued by ISACA on an annual basis.

13 April 2020
Adam Cason
The Nexus Article

Why Cryptographic Infrastructures Require High Availability

In today’s 24/7, hyperconnected world, system failures are simply not an option. Modern society depends on unbroken connectivity, and one of the most critical services requiring high availability is cryptographic infrastructure.

13 April 2020
MD-with-Cobit2019-authors
Governance Article

Managing Remote Work Environments With COBIT 2019

More organizations are making the shift to remote working environments for their employees due to the current world health crisis. Those organizations and the personnel responsible for security, infrastructure, risk and governance may need guidance.

30 March 2020
Ssalar Atrizadeh
The Nexus Article

The CCPA Impact Privacy and Cybersecurity Guideline

The US State of California state legislature enacted the California Consumer Privacy Act (CCPA) on 1 January 2020 through Assembly Bill 375 (AB 375), with additional amendments that were passed through Senate Bill 1121 (SB 1121). The CCPA refers to consumers in its language, which by definition includes employees.

9 March 2020
Robert Brzezinski
The Nexus Article

Vision or Visibility?

When speaking about IT or cybersecurity, I often come across the strategy/vision or visibility challenge—what comes first? It is almost a chicken or egg question and, while I believe we can develop the vision for IT/cybersecurity without the visibility into current environment, the question becomes: Can we “sell” that vision to decision-makers?

9 March 2020
David Smith
The Nexus Article

Cybersecurity Regulations That Impact the Banking Industry

The emergence of cybersecurity many years ago meant that financial services had to adhere to the laws and regulations that came with it. While some industries experienced little disruption from these regulations, the same cannot be said for the global banking industry.

10 February 2020
Jon Brandt
The Nexus Article

Misinformation—A Rapidly Growing Threat to Enterprises

As if the constant defensive posture of protecting digital assets were not enough, we now must question the authenticity of information. Deepfake reporting is on the rise and, just this past month, a popular US television series included deepfake in its storyline.1 Deepfakes are fake multimedia recordings but are usually manifested as video.

10 February 2020
Information Security
The Nexus Article

Share Your Real-World Cybersecurity Experience in a Case Study

One of the best ways to advance the cybersecurity field is to share your real-world experience with other professionals in the industry. Consider sharing your successes, key learnings and business solutions by contributing a case study for publication in the ISACA Journal.

10 February 2020
Information Security
The Nexus Article

Cybervictims, Defenders and Cybercriminals: How to Tell Them Apart

In this Orwellian era, when opponents are enemies and enemies are co-conspirators, where news is falsified and trust is endangered, it has become well-nigh impossible to apply clear definitions to attackers, victims and defenders in the context of cyberspace.

13 January 2020
Cybersecurity
The Nexus Article

Fluid Security: Managing Risk in Hybrid Networks

For years, security teams have been tasked with supporting the shift to the cloud, all while maintaining the responsibility of securing on-premise infrastructure and assets. Many are no doubt dreaming of the day they reach cloud-only status and they can shake off the fragmentation that creates so much complexity and inefficiency.

13 January 2020