Are you curious about how to maximize the strategic value and impact of your bug bounty program?In this episode, you can learn how Adobe continuously develops and improves its bounty program to engage security researchers and hackers globally

The Cyber Standard Podcast - Episode 1

Feb 28th, 2024 41m 39s

Tune in to the inaugural episode of "The Cyber Standard Podcast," “The Vision!”Join host Ameet Jugnauth as he interviews Robin Lyons, ISACA Principal, IT Audit Professional Practices, and Annmarie Dann, Director of Professional Standards at th

Measuring Security Risk Against Dynamic Threats

Feb 21st, 2024 28m 34s

Getting dressed is a routine example of everyday life packed with choices. Should I wear pants or shorts? Do I need a sweater? Shoes or sandals? While we often make these choices subconsciously, even actions that don’t appear as choices include

Reflecting on 25 Years of Information Security Matters

Feb 14th, 2024 13m 54s

ISACA recently marked the 25th anniversary of Steve Ross’ ISACA Journal Information Security Matters column. Over the last quarter century, technology, security, and the workforce have evolved, while certain challenges remain the same.In this

A View into CTEM Exposure Management: Reducing your Attack Surface 3x

Feb 7th, 2024 43m

Organizations can no longer rely on legacy vulnerability management solutions to protect against even basic attacks. Instead, vulnerability management is just one small component in a unified continuous threat exposure management (CTEM) approac

Improving Security while Enabling Market Access with CCF

Jan 31st, 2024 21m 44s

Software-as-a-Service (SaaS) providers continue to face increasing customer demand to attain security compliance certifications that demonstrate commitment to security, privacy, confidentiality, and more. Pursuing every national and internation

Leveraging Agile Concepts for Neurodiverse Auditors

Jan 17th, 2024 28m 43s

In this ISACA Podcast episode, we’ll delve into how leveraging Agile concepts can mitigate common challenges neurodiverse auditors face in the workplace. Neurodivergent auditors can bring a fresh and dynamic energy to projects if given appropri

Minimizing Risk and Audit Requests

Jan 3rd, 2024 21m 16s

With the increasing demand for audits and risk assessments, artifact requests will not be going away anytime soon. However, the burden these activities bring to the organization can be drastically reduced when audit and risk work together.In t

Issue Management Confidential: Tools and Best Practices for Improving IT Issue Management

Dec 27th, 2023 28m 40s

Effective IT issue management is crucial for organizations to mitigate financial loss, reputational damage, and operational disruptions. Issue management tools streamline the process by tracking and resolving issues, while risk rating helps pri

Improving Security while Enabling Market Access with CCF

Dec 13th, 2023 22m 22s

Scaling Your Threat Modeling Program

Nov 15th, 2023 18m 45s

Understanding product security risk starts before a single code line is written. Teams can discover threats to the architecture of a system early in the development life cycle with Threat Modeling. While it’s not a new concept, how do we transf

Secure your Supply Chain with an Effective Vendor Security Program

Oct 5th, 2023 15m 43s

Security risks introduced by vendors have become a top-of-mind concern for executives today, driven by recent supply chain incidents that have exposed organizations to operational and reputational risks.A robust vendor security program is now

Cultivating Inspired Leaders with Kristi Hedges

Oct 3rd, 2023 21m 11s

If we want people to bring their most creative, innovative selves to work, we need to cultivate a culture where inspiration is given, encouraged, and fostered.In this ISACA Podcast, Kristi Hedges, executive coach, and leadership development

Exploring the Benefits of Neurodiversity within Cybersecurity

Sep 27th, 2023 33m 58s

Neurodiversity within cybersecurity offers many benefits but requires organizations and hiring managers to re-evaluate hiring practices and job descriptions typically structured for neurotypical applicants.Join ISACA's Director of Professional

Internal Audits That Create Stakeholder Value Adopting an Agile Mindset

Aug 16th, 2023 22m 9s

Agile Scrum is a lightweight framework that promises to significantly improve internal audits by creating a mindset that generates stakeholder value through adaptive solutions for complex auditing problems. This mindset is needed as organizatio

Strategies for Avoiding Burnout

Aug 9th, 2023 26m 39s

Chronic workplace stress can lead to burnout, which poses a significant risk to the mental health of busy professionals, such as auditors. But how can these professionals protect themselves from burnout? And how can their employers help them do

The Danger of Distraction in Augmented Reality

Aug 2nd, 2023 21m 35s

While users of technology are becoming more educated in how to avoid cyberattacks such as phishing, a distracted user might be more prone to missing signs of social engineering. This project explored whether users immersed in augmented reality

Managing Human Risk Requires More Than Just Awareness Training

Jul 26th, 2023 21m 22s

A comprehensive information security awareness program must be in place to ensure that employees are aware of and educated about the threats they may encounter at the workplace. The workforce needs to be prepared to know how to respond to these

Preparing for Interruptions, Disruptions and Emergence Events

Jul 19th, 2023 36m

This podcast speaks about how an Information Systems (IS) Auditor can prepare for the Interruptions, Disruptions and the Emergence events that happen to the business and to technology.Describing the features of Interruptions, Disruptions and E

IS Audit in Practice: Data Integrity On Demand

Jul 11th, 2023 41m 21s

On this podcast, ISACA's Hollee Mangrum-Willis and special guest Cindy Baxter discuss the disparities between American communities and access to electronic health records. From there, they examine how key data insights from the ISACA community

ISACA Live | Digital Trust Priorities for Privacy and Emerging Tech

Jun 28th, 2023 28m 54s

ISACA Digital Trust Advisory Council Members Anne Toth and Michelle Finneran Dennedy will discuss privacy concerns and priorities around emerging tech and the most critical considerations for ensuring strong digital trust. Hosted by ISACA's Saf

Processes of Engagement with Scott Gould

Jun 21st, 2023 23m 56s

Scott Gould is the author of 'The Shape of Engagement: The Simple Process Behind how Engagement Works.' In this podcast, Scott gives a sneak peak at his upcoming member-exclusive, CPE-eligible event. Scott will discuss the essential frameworks

Delivering Security Value to Product Teams Using the Power of Data

Jun 13th, 2023 22m

In security, aligning with product teams has never been more important, especially when outmaneuvering adversaries. To foster a truly productive and action-oriented cybersecurity culture, security teams must begin addressing their product engin

AI Ethics and the Role of IT Auditors

Jun 6th, 2023 30m 8s

We, as a society, have always lived by certain norms that are driven by our communities. These norms are enforced by rules and regulations, societal influence and public interactions. But is the same true for artificial intelligence (AI)?In th

Using a Risk-Based Approach to Prioritize Vulnerability Remediation

Jun 1st, 2023 27m 53s

Organizations today struggle with vulnerability management. More specifically, remediating vulnerabilities in a timely manner poses a challenge. With vulnerability remediation backlogs growing at an alarming rate, what can organizations do to m