Using AI as a Defensive Tool
Body: In a previous Journal article, I wrote about artificial intelligence (AI) and talked about the massive amount of digital data that are being accumulated, how new digitally oriented technology is...
View ArticleInnovating Yourself as an IS Auditor
Body: As new technologies are developed, we have to stay up to date with them. More so than almost any other practitioner interfacing with information technology, auditors have to work hard at...
View ArticleLeveraging Emerging Technology for Better Audits
Body: My first role post-graduation was working as a financial statement auditor. We used tick mark pencils on printed workpapers, and we manually footed (recalculated) balances. On my second...
View ArticleAddressing the Challenges of New Privacy Laws
Body: US State of California Senate Bill 327 Information Privacy: Connected Devices (SB 327) goes into effect January 2020. What does that mean for you? Even if your organization does not develop...
View ArticleAI Practitioners: Our Future Is in Your Hands
Body: Imagine it is sometime in the 22nd century and that the future you is preparing for a complex surgical procedure at the local robot-run hospital, where it has become commonplace for robots to...
View ArticleAI or GDPR?
Body: Consider an organization adopting artificial intelligence (AI) as being represented by a self-driving car. Data serve as gasoline, which provides the driving force to the car; machine learning...
View ArticleThe Role of Data Strategy in Optimizing Organizational Processes
Body: The relevance of data cannot be over emphasized in today’s world, where change is the only constant. Decisions that managers and executives tend to make emanate from the availability of data...
View ArticleCybersustainability: Ensuring Digital Strategies That Protect Data
Body: Increasingly, security professionals use language that makes a distinct comparison between our physical environment and our digital infrastructures. We use terms such as “digital ecosystem,”...
View ArticleI Know What I Know (If You Know What I Mean)
Body: Edie Brickell (incidentally the wife of singer/songwriter Paul Simon) had a modest 1988 hit titled “What I Am.” The opening lines of the song contain the lyrics “I'm not aware of too many things....
View ArticleHow to Prepare for Taxation in a Digitalized Economy
Body: While IT professionals and auditors are not required to be tax experts, they do need to have a certain level of mindfulness with regard to taxation within the digitalized economy going forward as...
View ArticleIT General and Application Controls: To Outsource or Not to Outsource
Body: The choice of outsourcing IT audit activities is basically related to the efficient use of scarce or limited resources. A business point of view may not completely agree with best practices in a...
View ArticleDigital Transformation Oversight Extends Beyond Technology
Body: Digital transformation. Digitalization. Digitization. Three business terms in common use today that describe the differences in scope of the organizational digital effort, in this case in order...
View ArticleAuditing Green IT
Body: Sustainability has become a key focus in the 21st century. Both society and organizations recognize the importance of sustainability in their day-to-day functions and demand guidelines that help...
View ArticleEthics in IT: An Emerging Frontier in the Enterprise Governance of IT
Body: Trust. Privacy. Transparency. Three words that have invaded our technology lexicon. In an age of fashionable falsehoods, it is probably not surprising that these words permeate almost any aspect...
View ArticleLearning to Secure AI
Body: The trends appear to be presenting themselves all over the place; TV commercials, online ads, corporate product announcements, etc., are all saying the same thing: Artificial intelligence (AI)...
View ArticleThe Role of Ethics in Risk Management
Body: Most people are aware of and talking about risk management. However, barring a handful of high-profile and sophisticated IT organizations, for most enterprises, it is more talk vs. the actual...
View ArticleApplying Chaos Theory to Security
Body: It has become almost impossible to face cybersecurity issues just by using the presently available countermeasures; hackers always find aways to bypass them. Whatever the future state of...
View ArticleMeasuring Risk Quantitatively
Body: Quantitative risk has become a growing field of interest for information security professionals. This is good news, as I strongly believe that this is the right approach to perform meaningful...
View ArticleWhere to Begin Addressing the Policy-to-Execution Gap
Body: How do you transform security and privacy compliance requirements into practical steps that can be executed by a team? It is not easy, especially in an Agile environment that wants to move...
View ArticleAddressing the Vulnerabilities of IoT Devices
Body: My recent Journal article on the Internet of Things (IoT) was inspired by an article I read on a botnet takedown that involved the digital recording devices that many people have connected to...
View Article