ISACA

ISACA
Name	ISACA
Type	Nonprofit organization
Founded	1969
Headquarters	Rolling Meadows, Illinois, United States
Area served	Worldwide
Products	Certifications, guidance, research
Fields	Information systems auditing, cybersecurity, risk management, governance, assurance, privacy

ISACA ISACA is a global professional association providing knowledge, certifications, guidance, and community for professionals in information systems audit, cybersecurity, risk, privacy, and governance. Established in 1969, ISACA has developed widely adopted certification programs, technical frameworks, and research that intersect with standards bodies, regulatory authorities, and private-sector corporations. Its activities engage professionals in technology hubs, financial centers, academic institutions, and international organizations.

History

Founded in 1969 amid expanding computing operations, the organization emerged as practitioners from corporations and public-sector entities sought standards for auditing information systems, connecting with professionals from IBM, Hewlett-Packard, and General Electric. During the 1970s and 1980s it interacted with standards initiatives linked to the American Institute of Certified Public Accountants, the Institute of Internal Auditors, and the Information Systems Audit and Control Association chapters across North America and Europe. In the 1990s the association expanded globally alongside the rise of the Internet and worked in contexts overlapping with the Internet Engineering Task Force, World Bank procurement policies, and the Organisation for Economic Co-operation and Development discussions. Early work paralleled debates involving the Federal Information Processing Standards, the National Institute of Standards and Technology publications, and judicial and legislative developments such as the Sarbanes-Oxley Act and European Union directives. In the 21st century it responded to cybersecurity incidents linked to entities like Amazon Web Services, Equifax, and Microsoft, and coordinated thought leadership seen alongside institutions such as the World Economic Forum, the United Nations, the European Commission, and the Bank for International Settlements.

Governance and Structure

The body is governed by a global Board of Directors that sets strategic priorities and interacts with national regulators, stock exchanges, and multinational firms including JPMorgan Chase, Citigroup, and HSBC through corporate outreach. Operational management includes a global executive team liaising with standards bodies like the International Organization for Standardization and the Internet Corporation for Assigned Names and Numbers, and with academic partners such as Harvard University, Stanford University, Carnegie Mellon University, and Massachusetts Institute of Technology. Regional oversight is delivered via volunteer-led chapters that coordinate with municipal authorities in London, Tokyo, Sydney, Toronto, and Dubai. Committees and working groups engage experts from Deloitte, PricewaterhouseCoopers, KPMG, Ernst & Young, Accenture, Booz Allen Hamilton, Cisco Systems, Oracle Corporation, and Google.

Certifications and Education

ISACA administers professional credentials recognized across sectors including banking, healthcare, defense, and telecommunications. Core certifications include credentials that are prerequisites for roles at firms such as IBM, Microsoft, Amazon, Facebook, and Apple, and they are held by practitioners in organizations like the Department of Defense, NATO, Europol, and Interpol. Educational offerings are delivered through partnerships with universities and training providers affiliated with Coursera, edX, and LinkedIn Learning, and promoted at conferences hosted alongside RSA Conference, Black Hat, DEF CON, and Gartner events. Continuing professional education aligns with requirements similar to those of the Certified Public Accountant designation and the Project Management Professional certification, and supports career pathways in corporations like Intel, Samsung, Siemens, and Toyota.

Standards, Frameworks, and Research

The association publishes governance and assurance guidance that complements standards produced by ISO, NIST, COBIT, and ITIL frameworks, and informs compliance regimes such as the General Data Protection Regulation, the Payment Card Industry Data Security Standard, and HIPAA enforcement. Research outputs analyze threats and trends also studied by cybersecurity firms like Palo Alto Networks, FireEye, CrowdStrike, and Check Point Software, and policymakers at the European Central Bank and the U.S. Securities and Exchange Commission. White papers and frameworks are cited in scholarly work from Oxford University Press, Cambridge University Press, and journals like IEEE Transactions and the ACM Digital Library. Collaborative research initiatives have involved academic centers at University of Cambridge, University of Oxford, ETH Zurich, and National University of Singapore.

Activities and Advocacy

The organization conducts advocacy and outreach coordinated with legislative bodies such as the United States Congress, the European Parliament, and national ministries of finance and justice, and engages with multilateral organizations including the World Bank, the International Monetary Fund, and the United Nations Office on Drugs and Crime. It convenes conferences and workshops in conjunction with trade associations like the Information Systems Security Association, the SANS Institute, the Cloud Security Alliance, and ISF, and supports public-private partnerships involving the Cybersecurity and Infrastructure Security Agency and national CERT teams. Its policy positions intersect with debates on data protection involving Apple, Google, Microsoft, Amazon, Facebook, and regulatory actions such as antitrust investigations and privacy enforcement by authorities like the Information Commissioner’s Office and the Federal Trade Commission.

Membership and Global Chapters

Membership spans professionals in audit, assurance, risk, cybersecurity, privacy, and IT governance working at corporations, consulting firms, government agencies, and universities including Yale University, Princeton University, University of California systems, and the Indian Institutes of Technology. A global chapter network operates in capitals and financial centers such as New York City, London, Tokyo, Singapore, Hong Kong, Johannesburg, São Paulo, Mexico City, and Berlin, and collaborates with local associations like the Canadian Institute of Chartered Accountants, the Australian Securities and Investments Commission, and India's Reserve Bank. Chapters host events that attract speakers from corporations like Goldman Sachs, Morgan Stanley, Barclays, UBS, and Credit Suisse, and from technology organizations such as Red Hat, VMware, SAP, and Adobe. Membership benefits mirror those of professional societies in sharing resources comparable to IEEE, ACM, ISACA’s peer organizations, and national auditing institutes.

Category:Professional associations