ISACA IN 2019 Robin Lyons WHAT’S NEXT, NOW Technical Research Manager April 2019

WHERE WE HAVE BEEN

ISACA celebrates its 50th anniversary isaca timeline Victoria, BC, Canada chapter is 100th 1986 Electronic Data Process Auditing Association (EDPAA) forms in Los Angeles, CA, USA 1969 The Control Objectives for Information and related Technology (COBIT) framework is introduced 1996 2019 ISACA celebrates its 50th anniversary The first international chapters are established: Mexico City and Sydney 1976 EDPAA changes name to Information Systems Audit and Control Association (ISACA) 1994 ISACA acquires the CMMI Institute 2016

GLOBAL NONPROFIT PROFESSIONAL ASSOCIATION FOR INDIVIDUALS AND ENTERPRISES 2019 annual data points Serving more than 460K ENGAGED PROFESSIONALS 221 140K+ CHAPTERS WORLDWIDE MEMBERS IN 188 COUNTRIES 2.8K+ GLOBAL CHAPTER LEADER VOLUNTEERS 126K+ 140+ ISACA serves any professional that meaningfully touches IT audit & assurance, IT security, IT governance or IT risk, and cybersecurity. ISACA has continually grown as the need for IT professionals has increased. New Chapters are being added every few months within the 5 regions. ISACA is truly an international organization; although ISACA is headquartered in the U.S., less than half our international community resides or works there. Our members say that they remain ISACA members because of the access to industry standards and best practices, the access to research, and ISACA’s overall support for the profession As ISACA expands its impact and influence, our engaged and vibrant member community is powering that change: Participating in a global ecosystem of professionals, exchanging ideas, perspectives, and insights Building a shared knowledge base, and disseminating that knowledge and content throughout our community Networking opportunities, as well as leadership and professional development opportunities Increasing impact locally, nationally and regionally Expanding our global footprint CERTIFICATIONS ISSUED ENTERPRISES SERVED ® 2019 ISACA. All Rights Reserved.

140K+ Global Presence 20% Europe 48% North America 18% Asia 6% Africa MEMBERS IN 188 COUNTRIES* Global Presence 20% Europe 48% North America 18% Asia *As of October 2018 6% Africa ISACA’s reach is truly global. Although we are headquartered in the U.S., that region only accounts for about 48% of the total membership. How is that ISACA has been able to grow year after year, and have such a global footprint? For IT professionals and practitioners looking to grow and advance their careers, ISACA offers access to leading research and insights, career enhancement opportunities and industry-specific education and training: auditing procedures and assurance programs, governance frameworks, business management guides, and well-established, globally recognized credentialing programs. ISACA membership also provides access to a portfolio of thought leadership resources, training sessions, and networking events that support one’s personal goals and professional development. Our global network allows IT professionals to connect with peers and share best practices via the Engage online communities, our global conferences, and our opportunities to engage as a subject matter expert. By providing access to these unique benefits and resources, ISACA is well positioned to serve our professional community and to help them realize the positive potential of technology. In 2018, ISACA expanded its global footprint by opening an office in Beijing. China is of strategic importance to ISACA global expansion and community development. The opening of our China office in 2018, the first office outside of the US, embodies ISACA’s commitment to contributing to China’s information technology and cybersecurity industries.   Opening an office in Beijing allows the Chinese professional community to have wider and more direct access to ISACA’s resources, and allows ISACA to better respond to China’s unique information security and cybersecurity needs and challenges. The ISACA China office will become a bridge between the Chinese community and global community, and between China’s business technology and security professionals. It will foster mutual learning among communities in China and promote best practices developed based on Chinese local applications to the global community. 4% Latin America 4% Oceania ® 2019 ISACA. All Rights Reserved.

IT AUDIT STRATEGY WHAT’s Next, NOW ISACA serves any professional that meaningfully touches IT audit & assurance, IT security, IT governance or IT risk, and cybersecurity. ISACA has continually grown as the need for IT professionals has increased. New Chapters are being added every few months within the 5 regions. ISACA is truly an international organization; although ISACA is headquartered in the U.S., less than half our international community resides or works there. Our members say that they remain ISACA members because of the access to industry standards and best practices, the access to research, and ISACA’s overall support for the profession As ISACA expands its impact and influence, our engaged and vibrant member community is powering that change: Participating in a global ecosystem of professionals, exchanging ideas, perspectives, and insights Building a shared knowledge base, and disseminating that knowledge and content throughout our community Networking opportunities, as well as leadership and professional development opportunities Increasing impact locally, nationally and regionally Expanding our global footprint IT AUDIT STRATEGY WHAT’s Next, NOW

KNOWLEDGE AND INSIGHTS WHAT’S NEXT, NOW ISACA THOUGHT LEADERSHIP INSIGHTS NEWS & TRENDS SOLUTIONS WHITEPAPERS TECH BRIEFS ARTICLES ROADMAPS & FRAMEWORKS AUDIT PROGRAMS

KNOWLEDGE AND INSIGHTS WHAT’S NEXT, NOW WHITEPAPERS Q1 – Q3 2018 Getting Started with Risk Management Continuous Assurance Using Data Threat Modeling Transport Layer Security State of Cybersecurity 2018 Q1 2019 Enforcing Data Privacy in the New Digital World Phishing Defense and Governance Improving Security Awareness Using Marketing Techniques ® 2019 ISACA. All Rights Reserved.

TECH BRIEFS/ARTICLES/ ROADMAPS KNOWLEDGE AND INSIGHTS WHAT’S NEXT, NOW TECH BRIEFS/ARTICLES/ ROADMAPS The Vaguely Defined Perimeter ISACA-CMMI GDPR Assessment (Roadmap) Networked Biomedical Device Security Reasonable Software Security Engineering Q1 2018 Guide to China’s Regulatory Cybersecurity Implementation Framework 3D Printing The Darknet Q3 2018 ® 2019 ISACA. All Rights Reserved.

KNOWLEDGE AND INSIGHTS WHAT’S NEXT, NOW AUDIT PROGRAMS Microsoft SQL Server 2016 Application Container Auditing Artificial Intelligence GDPR Audit Program Bundle Q2 - Q4 2018 Cloud Access Security Broker (CASB) Blockchain Preparation GDPR for Small & Medium Enterprises Q2 2019 ® 2019 ISACA. All Rights Reserved.

TRENDS IN ISACA AUDIT PROGRAMS KNOWLEDGE AND INSIGHTS WHAT’S NEXT, NOW TRENDS IN ISACA AUDIT PROGRAMS Trend analysis Process (driven by compliance requirements) Scripting GDPR Audit Program Bundle ® 2019 ISACA. All Rights Reserved.

Join the celebration by honoring our past, and innovating our future ISACA TURNS 50 IN 2019 Join the celebration by honoring our past, and innovating our future CONVERSE #ISACA50 JOIN isaca.org/join VOLUNTEER isaca.org/volunteer ENGAGE engage.isaca.org CELEBRATE isaca50.org VISIT isaca.org 11/11/2019

THANK YOU! QUESTIONS? 11/11/2019