Information Systems Audit and Control Association

Information Systems Audit and Control Association
Name	Information Systems Audit and Control Association
Abbreviation	ISACA
Formation	1969
Type	Professional association
Headquarters	Rolling Meadows, Illinois
Region served	Global
Membership	Professionals in information technology, audit, security, governance

Information Systems Audit and Control Association is a global professional association focused on information technology audit, security, governance, risk, assurance, and privacy. Founded in 1969, it develops standards, certifications, guidance, and educational resources used by practitioners in private sector firms, public agencies, financial institutions, technology vendors, and academic institutions. The association interacts with regulators, standards bodies, and multinational organizations to influence practice in cybersecurity, enterprise risk management, and digital transformation.

History

The association originated during a period of rapid adoption of mainframe computing and systems accounting, coinciding with milestones such as the Apollo program, the rise of IBM System/360, and the formation of professional bodies like Association for Computing Machinery and Institute of Electrical and Electronics Engineers. Early membership included auditors from Ernst & Young, PricewaterhouseCoopers, Deloitte, and KPMG as well as practitioners from Federal Reserve System, United States Department of Defense, and multinational corporations like General Electric and Siemens. Over decades it responded to events including the promulgation of Sarbanes–Oxley Act of 2002, the advent of Windows NT, the emergence of Linux, the expansion of Internet Protocol suite, and incidents such as the Sony Pictures hack and Equifax breach. The association built relationships with standards organizations such as International Organization for Standardization, Institute of Internal Auditors, National Institute of Standards and Technology, and International Telecommunication Union. Influential figures and partner institutions have included Michael Porter, Peter Drucker, ISO/IEC JTC 1, COSO, and World Economic Forum workforce initiatives.

Organization and Governance

The association's governance model features a board of directors, regional boards, and advisory councils that mirror structures used by World Bank, United Nations, European Commission, and multinational corporations like Microsoft Corporation and Google LLC. Committees include technical councils aligned with IEEE Standards Association, ISO working groups, and task forces that coordinate with regulators such as Securities and Exchange Commission and ministries like HM Treasury in the United Kingdom. The organization collaborates with academic partners including Harvard University, Massachusetts Institute of Technology, Stanford University, Carnegie Mellon University, and University of Cambridge for research and curriculum development. Its staff and volunteers frequently engage with professional societies such as Association for Information Systems, ISACA Foundation, ISF, and Information Systems Security Association.

Certifications and Education

The association administers vendor-neutral certifications taken by professionals at corporations like Amazon (company), Apple Inc., Cisco Systems, Oracle Corporation, and SAP SE. Core certifications include credentials comparable with frameworks from NIST Cybersecurity Framework, ISO/IEC 27001, and COBIT; candidates often prepare using materials from publishers like Wiley, McGraw-Hill Education, and O'Reilly Media. Educational partnerships include collaborations with institutions such as The Open University, Monash University, University of Texas at Austin, and industry training providers like Pluralsight and Coursera. Certification holders work in roles at firms including Accenture, Capgemini, Booz Allen Hamilton, Lockheed Martin, and Goldman Sachs.

Standards, Frameworks, and Publications

The association produces guidance and frameworks that align with international norms such as ISO/IEC 38500, ISO/IEC 27002, and governance models like COBIT 5 and later iterations. Publications include professional journals, white papers, and frameworks used alongside work from NIST, ENISA, European Central Bank, and think tanks like Brookings Institution and RAND Corporation. It disseminates content in formats similar to reports by Gartner, Forrester Research, and McKinsey & Company. Research topics have intersected with initiatives from Project Management Institute, ITIL Foundation, PCI Security Standards Council, and standards from IETF.

Membership and Chapters

Membership comprises practitioners from multinational institutions such as Goldman Sachs, JPMorgan Chase, Citigroup, Bank of America, Deutsche Bank, and technology firms like Intel Corporation and Dell Technologies. Local chapters operate in cities and regions including New York City, London, Toronto, Sydney, Singapore, Tokyo, Frankfurt, Dubai, and Johannesburg, coordinating events with academic partners such as University of Oxford, National University of Singapore, and University of Cape Town. The chapter model resembles professional networks like Rotary International and Toastmasters International and cooperates with regulatory bodies including Financial Conduct Authority and Australian Prudential Regulation Authority.

Conferences and Events

The association organizes global and regional conferences attracting delegates from organizations like IBM, Microsoft, Google, Amazon Web Services, Cisco, Palo Alto Networks, CrowdStrike, Splunk, and FireEye. Events have thematic overlap with summits such as RSA Conference, Black Hat USA, DEF CON, Gartner Security & Risk Management Summit, and gatherings like World Economic Forum Annual Meeting where cybersecurity, privacy, and governance are discussed. Conference programming includes tracks comparable to those run by SANS Institute, ACM SIGCOMM, USENIX, and IEEE Symposium on Security and Privacy, featuring speakers from institutions such as Harvard Kennedy School, Princeton University, and Stanford Law School.

Category:Professional associations