Privacy, Risk & Compliance

A public agency awards a technology services contract with clear deliverables, yet six months later neither the buyer nor supplier agrees on which requests…

ISACA COBIT 5 is an older generation of the enterprise IT governance framework, preceding both COBIT 2019 and COBIT 7. ISACA still lists COBIT 5 certificate resources, and many organizations, professionals, audit records, and historical governance programs continue to reference the framework. ISACA introduced COBIT 7 Foundation on October 27, 2026. New purchases of COBIT 2019 Foundation and Design & Implementation exams ended October 26, 2026, with existing registered candidates permitted to sit by April 26, 2027. The version context therefore matters before relying on any legacy exam page. The…

ISACA CRISC validates the ability to identify, assess, respond to, and monitor information-systems risk in a business context. The current exam contains 150 questions across four domains: governance, risk assessment, risk response and reporting, and technology and security. The weighting emphasizes response and reporting most heavily, which reflects the credential’s focus on turning risk analysis into decisions, controls, ownership, and measurable action. The ISACA CRISC page belongs within the wider ISACA certifications ecosystem. The entry-level ISACA IT Risk Fundamentals certificate can provide useful foundational vocabulary, while ISACA CRISC expects deeper…

ISACA IT Risk Fundamentals is a current certificate for professionals who need a practical introduction to information and technology risk. It is intended for people new to risk, specialists who interact with risk teams, and organizations building common risk language. The exam has no prerequisite and uses both knowledge questions and performance-based tasks in a remotely proctored format. The ISACA IT Risk Fundamentals page sits naturally inside the broader ISACA certifications ecosystem and can serve as groundwork for the more advanced ISACA CRISC path. Current coverage spans risk introduction, governance…

The ISC2 CAP page belongs to an important historical certification lineage, but candidates should not treat the old name as a current credential. ISC2 renamed Certified Authorization Professional to Certified in Governance, Risk and Compliance in February 2023. The underlying discipline still centers on risk, controls, authorization, continuous monitoring, and governance, but the modern name reflects a broader GRC role than the original authorization-focused label suggested. That makes the ISC2 CAP destination most useful as a transition resource. Readers arriving through the legacy name should understand why it changed and…

CSA CCAK is the Certificate of Cloud Auditing Knowledge, created through the combined cloud-security expertise of the Cloud Security Alliance and the audit expertise of ISACA. The credential was designed to help auditors, security professionals, risk practitioners, and cloud stakeholders evaluate cloud environments where responsibility, evidence, control ownership, and assurance differ from traditional on-premises infrastructure. The CSA CCAK page requires a status note in late 2026. Cloud Security Alliance confirms that CCAK stopped being available on the ISACA website on October 3, 2025. Its CCAK update says CSA hopes to…

ISACA CDPSE is the Certified Data Privacy Solutions Engineer certification for professionals who translate privacy requirements into systems, processes, and technical controls. The exam was updated on June 2, 2025, and currently contains 120 questions across Privacy Governance (20%), Privacy Risk Management and Compliance (18%), Data Life Cycle Management (23%), and Privacy Engineering (39%). That update makes the engineering emphasis especially visible, with privacy engineering carrying the largest domain weight. The ISACA CDPSE page sits within the wider ISACA certifications ecosystem. Candidates should not study it as a law-only privacy…

ISACA CGEIT is designed for professionals who govern enterprise information and technology rather than manage one technical function in isolation. The certification asks candidates to connect strategy, accountability, resources, investment value, performance, and risk at an enterprise level. That makes the exam less about memorizing control terms and more about deciding how technology should be directed, monitored, and evaluated in support of business objectives. The ISACA CGEIT page sits naturally inside the broader ISACA certifications ecosystem. Candidates should also understand the relationship with ISACA COBIT 2019, because COBIT provides governance…

ISACA CISA remains one of the core professional certifications for information-systems audit and assurance. The current exam contains 150 questions across five job-practice domains covering the audit process, governance and management of IT, systems acquisition and implementation, operations and business resilience, and protection of information assets. The breadth is intentional because modern auditors need to evaluate both technology controls and the business processes those controls support. The ISACA CISA exam page and the broader ISACA CISA certification page belong inside the wider ISACA certifications ecosystem. Candidates should study the exam…

ISACA CISM validates the management of enterprise information security rather than hands-on administration of individual security tools. The certification focuses on governance, risk management, security-program development and management, and incident management. Candidates are expected to choose actions that align security with business objectives, assign accountability, allocate resources, measure performance, and manage risk at a leadership level. The ISACA CISM exam page and the broader ISACA CISM certification page sit within the ISACA certifications ecosystem. A crucial 2026 detail is timing: ISACA has announced that the updated exam content outline takes…

ISACA COBIT 2019 Foundation introduces the concepts used to govern and manage enterprise information and technology as a coherent system. This now describes a historical exam: ISACA launched COBIT 7 Foundation on October 27, 2026, and stopped new purchases of COBIT 2019 Foundation on October 26, 2026. Candidates with existing registrations may take the old examination through April 26, 2027. New candidates should follow the COBIT 7 Foundation syllabus rather than assume the 2019 exam remains available to purchase. The ISACA COBIT 2019 page should be studied alongside the broader…

The historical ISACA COBIT 2019 Design and Implementation certificate built on 2019 Foundation knowledge and focused on tailoring and improving enterprise governance. New purchases of this examination closed on October 26, 2026, and previously registered candidates must complete it by April 26, 2027. ISACA debuted COBIT 7 Foundation on October 27, 2026 and plans a COBIT 7 Design & Implementation offering in 2027; the future exam should not be advertised as already bookable. The COBIT Design & Implementation page should be studied with the prerequisite ISACA COBIT 2019 Foundation page…

The IIA CIA Part 1 2025 is the foundation of the revised Certified Internal Auditor examination. The update aligns the exam more closely with the Global Internal Audit Standards and concentrates the first part on why internal audit exists, how auditors preserve professionalism, how governance, risk, and control fit together, and how fraud risk should be understood within assurance and advisory work. The 2025 Part 1 syllabus carries four official weights: Foundations of Internal Auditing (35%), Ethics and Professionalism (20%), Governance, Risk Management and Control (30%), and Fraud Risks (15%)….

The IIA CIA Part 2 2025 turns internal audit principles into engagement work. The revised syllabus is built around three large responsibilities: planning the engagement, gathering and evaluating information, and supervising and communicating the work. The emphasis is practical because an internal audit conclusion is only as strong as the risk assessment, criteria, evidence, analysis, and communication that support it. The 2025 Part 2 syllabus has three domains: Engagement Planning (50%), Information Gathering, Analysis and Evaluation (40%), and Engagement Supervision and Communication (10%). The assessment uses 100 multiple-choice questions over…

The IIA CGAP belongs to an earlier generation of specialty certifications for public-sector auditors. The credential remains meaningful for professionals who earned and maintain it, but the original certification program is no longer a current entry path for new candidates. That status distinction is essential because an old exam URL should not be presented as if it describes a live certification examination in 2026. The historical The IIA CGAP page is therefore best understood as a legacy resource within the broader The IIA certifications ecosystem. The IIA has confirmed that…