REAL-WORLD RESILIENCE

The Pitfalls of Supply Chain Risk Management

Author: David Podeswik

Many organizations have progressively increased their reliance on a growing number of global suppliers.

Operational Resilience: Preparing for the Next Global Crisis

Author: Sumedha Adavade

Although resilience in business operations has been a priority for organizations since before the onset of the COVID-19 pandemic, the ongoing global pandemic has made resilience more critical than ever.

Is Business Continuity Management Still Relevant?

Author: Spiros Alexiou

Business continuity refers to the ability of organizations to minimize losses and keep functioning and fulfilling their missions, even under extremely adverse circumstances. But this is costly and, in current times, where cost cutting is a key concern, there is...

Case Study: Cloud-Native Security Using Zero Trust

Author: Ed Moyle

For most organizations, cloud usage is now the norm. Much like the adoption path of many technologies, the road to cloud normalization started with an initial reluctance and has only recently begun to gain wider acceptance.

Incident Response During the Global COVID-19 Crisis

Author: Ofir Eitan

Since March 2020, the global COVID-19 pandemic has affected the characteristics of incident response (IR) in the cybersphere. These unprecedented times have forced some enterprises to deal with their most severe business crises to date and to cope with the pandemic’s impact on the threat landscape.

Understanding the Shared Responsibilities Model in Cloud Services

Authors: Jai Sisodia and Mohammed Khan

The world of on-premises technology was practical when cloud services were not available.

Meeting the Demand for Zero Trust Talent

Authors: Fortune Onwuzuruike and Kenneth Myers

Implementing a zero trust architecture creates a more adaptable security platform that is not designed around a static, perimeter-based network defense strategy, which can help further protect critical systems and data from attacks based on confidentiality, integrity and availability.

Book Review: Creating a Virtual-First Line of Defense for Secure Software Development

Author: Robert Findlay

Creating functioning software is a challenge at the best of times, but ensuring that it is also secure is time consuming, requires fairly scarce skills and, frequently, is not effective.

Letter From a Past Editor: Dear Reader

Author: Michael P. Cangemi

Congratulations to the ISACA Journal on achieving 50 years of publications. The massive body of information published has, no doubt, positively impacted ISACA...

Information Security Matters: Cyber (Business) Recovery

Author: Steven J. Ross

The last of the five core functions of the US National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) is Recover. It comes last because this function only comes into play if the previous four—Identify, Protect, Detect and Respond...

IS Audit in Practice: Resilience and Regulation

Author: Cindy Baxter

My evenings are usually quiet three weeks out of the month, but at least one week is packed with community meetings and city public hearings. The pandemic may have impacted in-person gatherings, but government and community action continue online.

The Bleeding Edge: The Impact of Cryptocurrency and Its Carbon Footprint

Author: Jiewen Wang

In recent years, cryptocurrency has played an increasingly important role in the financial market. From July 2020 to June 2021, the popularity of global cryptocurrency increased by more than 880 percent.

Innovation Governance: Planning for Failure to Ensure Resilience

Author: K. Brian Kelley

Even prior to the COVID-19 pandemic, the technology world was in the midst of a fundamental shift in how we operate. DevOps and cloud computing adoption growth was the vanguard of this change.

Help Source Q&A

Author: Sunil Bakshi

What is resilience and how it is related to business continuity? Simply put, “resilience” means the ability to withstand an adverse situation and return to normal.