ISACA Podcast

ISACA Podcast

The ISACA Podcast gives you insight into the latest regulations, trends and threats experienced by information systems auditors and governance and security professionals. Whether you are beginning your career or have decades of experience, the ISACA Podcast can help you be better equipped to address industry challenges and embrace opportunities.

  1. Oct 22

    30 Years of COBIT. One Global Framework. A Lasting Impact on IT Governance.

    For three decades, COBIT has helped organizations around the world strengthen IT governance, manage risk, align technology with business objectives, and build digital trust. But how has this globally recognized framework evolved, and what does its future look like in an era of rapid technological change? Join Mark Thomas and a distinguished panel of experts from around the world as they celebrate 30 years of COBIT, reflecting on its evolution, global influence, and continued relevance in today's complex digital landscape. From its beginnings as a collection of control objectives to its development into a comprehensive framework for enterprise governance of information and technology, COBIT has provided organizations with a common language for managing technology, strengthening accountability, and driving business value. Through a global exchange of perspectives, this conversation explores how COBIT adapts to regional regulations and organizational needs while maintaining a consistent foundation for effective IT governance. Discover how the framework supports alignment with other standards, strengthens digital trust, and helps organizations navigate emerging technologies and evolving business challenges. 🌍 Explore key themes from the discussion: 🔹 30 Years of COBIT: Reflect on the framework's evolution and its lasting influence on IT governance worldwide. 🔹 A Global Perspective: Discover how organizations across different regions apply COBIT to address local regulations, business priorities, and governance challenges. 🔹 Building Digital Trust: Explore how effective governance frameworks support accountability, transparency, and confidence in technology. 🔹 Connecting Frameworks and Standards: Learn how COBIT provides a common foundation for aligning governance practices with other industry frameworks and requirements. 🔹 Looking Toward the Future: Explore COBIT's continued relevance as organizations navigate digital transformation, emerging technologies, and increasingly complex IT environments. Meet the Moderator & Panelists Moderator: Mark Thomas, CRISC, CGEIT, CDPSE, AAIR — COBIT Assessor, DTEF | ISACA Hall of Fame Panelists: • Leonard Ong, CISA, CISM, CRISC, CGEIT, CDPSE, AAIA, AAISM, AAIR, CSXP — COBIT Assessor | ISACA Hall of Fame • Gabriela Reynaga Vargas, CISA, CRISC, CDPSE — COBIT Accredited Trainer • Sanjay Verma, CISM, CISA, CGEIT, CRISC, COBIT, AAIA, AAISM, AAIR • Greet Volders, CGEIT — COBIT Assessor • Tichaona Zororo, CISA, CISM, CRISC, CGEIT, CDPSE — COBIT Assessor | ISACA Hall of Fame Learn More & Stay Connected 🌐 Explore COBIT from ISACA: Discover how COBIT helps organizations strengthen enterprise governance of information and technology, optimize performance, and create business value. https://www.isaca.org/resources/cobit 💡 Explore More ISACA Insights: Access research, resources, and expert perspectives on governance, cybersecurity, risk, audit, digital trust, and emerging technologies. https://www.isaca.org/resources 🎙️ Explore More ISACA Podcast Episodes: Hear conversations with industry leaders and experts shaping the future of technology, governance, and digital trust. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library ▶️ Subscribe to ISACA on YouTube: Stay connected with expert discussions, industry insights, professional development resources, and the latest conversations shaping the future of IT. https://www.youtube.com/@IsacaHq 💬 Join the Conversation: How has COBIT influenced your organization's approach to IT governance? Share your experiences and insights in the comments! 👍 Like, comment, share, and subscribe for more expert perspectives on IT governance, digital trust, cybersecurity, risk, and emerging technologies. #COBIT #COBIT30 #ITGovernance #DigitalTrust #EnterpriseGovernance #ISACA #DigitalTransformation

  2. Sep 10

    When Risks Can Think: Managing Risk and Compliance in the AI Era

    AI is reshaping enterprise risk by introducing new concerns like drift, hallucination, model security, and expanded data use, while also amplifying existing operational and compliance challenges. Organizations are feeling growing pressure to move faster with AI, even as critical gaps in visibility, collaboration, and enforcement make governance harder to scale. In this episode, ISACA’s Donnie Carpenter, Principal, Information Security and Professional Practices, Research Development, speaks with Michael Siegrist, Field CTO and Head of Americas Risk Solutions at OneTrust, about what an integrated approach to risk and compliance looks like in practice—from assessing AI across the IT ecosystem to prioritizing risk in ways that support business growth rather than stall innovation. Michael unpacks how organizations can govern AI responsibly, translate emerging risks into enforceable controls, and build greater visibility across their risk landscape. Listeners will come away with a clearer framework for managing emerging AI risks while enabling innovation with greater confidence. Related Resources & Stay Connected Learn More About OneTrust: Discover how OneTrust helps organizations manage risk, compliance, privacy, data, and AI governance while building greater trust across the enterprise. OneTrust Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights. ISACA Podcast Library Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. ISACA YouTube Channel Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.

  3. Sep 3

    The New Rules of Governance: Achieving Continuous Compliance with Adaptive Identity

    As AI shifts from a theoretical advantage to an operational reality, the race is on to define the rules of engagement. Yet, for enterprise leaders, the real dilemma isn’t just waiting for regulations to land—it’s realizing that static, point-in-time compliance is officially dead. To secure and govern a dynamic, AI-driven ecosystem, organizations must evolve from rigid access controls to a model of adaptive identity. In this episode, ISACA’s Safia Kazi, Principal Research Analyst, Privacy, Research Development, speaks with Jeff Purrington, Identity Strategist at SailPoint, to cut through the compliance noise and explore how adaptive identity can act as a real-time control plane—allowing organizations to continuously assess risk, automate governance, and secure both human and non-human identities. Tune in to discover: The shift to adaptive governance: How to move from static, periodic compliance reviews to a continuous, real-time adaptive identity model that automatically aligns with evolving global regulations. Securing the non-human frontier: Proven strategies to apply adaptive controls to AI agents, machine identities, and automated service accounts, ensuring they remain compliant and visible. Audit-ready automation: Actionable steps to leverage identity security as a dynamic guardrail, allowing your organization to innovate rapidly with AI while staying continuously audit-ready. Related Resources & Stay Connected Learn More About SailPoint: Discover how SailPoint helps organizations manage and secure identities, strengthen governance, and navigate the evolving demands of AI-driven enterprises. SailPoint Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights. ISACA Podcast Library Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. ISACA YouTube Channel Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.

  4. Jul 21

    Your Containers Are Probably Full of Holes: Fixing Docker Security with AI

    Containers run much of the software we depend on, and many are shipped with security problems that no one noticed. Traditional container scanning tools can miss important vulnerabilities, insecure configurations, embedded secrets, and risky Dockerfile patterns before they reach production. In this episode, ISACA’s Adedayo Ojo, Principal, Emerging Technologies and Professional Practices, Research Development, speaks with Advait Patel, Senior Site Reliability Engineer at Broadcom, Docker Captain, and Google Developer Expert in Google Cloud, about why traditional container scanning misses so much and what it takes to identify the issues that matter most. Advait shares lessons from running containers at scale on a large cloud platform and explains how he built DockSec, an open-source tool that uses AI to identify insecure Dockerfile patterns, embedded secrets, and misconfigurations that signature-based scanners tend to overlook. The conversation offers practical guidance that developers and security teams can apply immediately, along with an honest look at where AI can strengthen container security—and where it cannot. Related Resources & Stay Connected Explore DockSec on GitHub: Review the open-source DockSec project, explore its features, and learn how it uses AI to identify insecure Dockerfile patterns, embedded secrets, and container misconfigurations. https://github.com/OWASP/DockSec Learn More About DockSec from OWASP: Discover more about the DockSec project, its approach to container security, and how it helps developers identify risks that traditional signature-based scanners may miss. https://owasp.org/DockSec/ Connect with Advait Patel on LinkedIn: Follow Advait for insights on container security, cloud infrastructure, site reliability engineering, Docker, and AI-powered security. https://www.linkedin.com/in/advaitpatel93/ Explore Advait Patel’s GitHub: View Advait’s open-source projects, technical work, and contributions to cloud and container security. https://github.com/advaitpatel Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.

  5. Jul 14

    Modern Approach to Identity Security

    As threats have evolved, so too has the approach to modern identity security. A privilege-centric approach must be adopted to address this evolution. Identity management for all accounts within an organization must mature to meet the demands of the cloud, nonhuman identities (NHIs), agentic AI, and modern attack vectors. Your strategy must now manage and mitigate not only traditional privileged access (root and administrator accounts), but also attacks targeting modern identities with paths to privileged access. These paths to privilege remain one of the most valuable targets for cybercriminals because many organizations continue to defend their environments with fragmented or siloed security strategies and solutions. Security gaps and risks exist across endpoints, cloud environments, SaaS applications, third-party access, and now agentic AI and NHIs, making today's threat landscape more complex than ever. In this episode, ISACA's Donnie Carpenter, Principal, Information Security and Professional Practices Research Development, speaks with Christopher Hills, Chief Security Strategist at BeyondTrust, about the evolution of identity security and why organizations must rethink how they protect privileged access in today's rapidly changing technology landscape. Related Resources & Stay Connected Learn more about BeyondTrust: Discover how BeyondTrust helps organizations protect identities, manage privileged access, and reduce cyber risk across cloud, endpoint, SaaS, and hybrid environments. BeyondTrust Additional Resources from BeyondTrust: Shadow AI Governance: How to Detect Shadow AI Governance Microsoft Vulnerability Report: Microsoft Vulnerability Report Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging technology insights. ISACA Podcast Library Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. ISACA YouTube Channel Don't forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, and risk.

  6. Jun 30

    ISACA Podcast: Why You Should Use the F Word More

    FedRAMP 20x is redefining what federal compliance looks like. Designed to modernize the authorization process, this bold initiative is moving cybersecurity governance toward automation while reducing the lengthy timelines and documentation burdens that have traditionally defined FedRAMP. Join host Safia Kazi as she speaks with Jake Bernardes, CISO at Anecdotes, about what FedRAMP 20x is, why it matters, and how this transformation will reshape governance, risk, and compliance (GRC) automation. Together, they explore what organizations can expect as federal compliance evolves and what the changes mean for enterprise customers navigating the future of cybersecurity governance. Related Resources & Stay Connected Learn more about Anecdotes: Discover how Anecdotes is helping organizations transform governance, risk, and compliance with AI-powered automation, continuous monitoring, and audit-grade data that enables faster, smarter, and more scalable GRC programs. https://www.anecdotes.ai/  Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT and cybersecurity.

  7. May 28

    The Future of IT Audit: Key Changes in ITAF 5

    Technology is transforming how organizations operate — and IT audit and assurance must evolve alongside it. In this episode, Paul Phillips sits down with Mary Carmichael, contributor to the newly updated IT Audit and Assurance Framework (ITAF 5), to discuss how audit professionals can adapt to today’s increasingly complex digital enterprise.   Together, they explore the major shifts shaping modern audit, including AI governance, digital ecosystems, automation, evolving risk landscapes, cloud environments, and the growing need for stronger data literacy within audit teams. Mary also shares practical guidance on how organizations can begin modernizing their audit approach without overhauling everything overnight.   Key discussion topics include: The evolution from traditional control testing to outcome-based assurance Why audit teams need stronger technology and data capabilities AI governance, automation, and digital risk considerations Building practical audit modernization strategies How ITAF 5 supports governance, credibility, and audit relevance in modern enterprises   Whether you're an auditor, governance professional, cybersecurity leader, or risk practitioner, this conversation provides valuable insight into the future of audit and assurance in a technology-driven world.   Related Resources & Stay Connected Download ITAF 5: https://www.isaca.org/resources/itaf-is-a-framework   Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library   ▶️Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq   🔔 Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT audit, governance, risk, and cybersecurity.   #ITAudit #ITAF5 #AuditAndAssurance #Cybersecurity #Governance #RiskManagement #AI #ISACA #DigitalTransformation #InternalAudit

  8. May 21

    ​​Breaking the Compliance Mentality​

    In today’s evolving cybersecurity landscape, strong leadership is the foundation of an effective security posture. Yet many agencies struggle when a “compliance mentality” takes hold, where meeting minimum requirements overshadows proactive risk management. In this ISACA Podcast episode, Lisa Cook, ISACA's Principal Research Analyst, sits down with Patrick Bevill, Chief Information Security Officer (CISO) at the Federal Retirement Thrift Investment Board, to explore how agency leaders can establish a strong tone at the top and foster a culture that prioritizes security resilience over check-the-box compliance.​ Related Resources & Stay Connected Learn more about Williams Adley: Discover how Williams Adley helps organizations navigate audit, assurance, cybersecurity, risk, and advisory services with a focus on integrity and innovation. https://www.williamsadley.com/ Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library  Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. https://www.youtube.com/@IsacaHq    Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT and cybersecurity.

See All (100)

4.5
out of 5
34 Ratings

About

The ISACA Podcast gives you insight into the latest regulations, trends and threats experienced by information systems auditors and governance and security professionals. Whether you are beginning your career or have decades of experience, the ISACA Podcast can help you be better equipped to address industry challenges and embrace opportunities.

Information

  • Creator
    ISACA Podcast
  • Years Active
    2017 - 2026
  • Episodes
    101
  • Rating
    Clean
  • Copyright
    © All rights reserved
  • Show Website
    ISACA Podcast

You Might Also Like