The Road to ISACA 50
Follow along as we gear up for our 50th anniversary in 2019 and help us count down to the future!

By: Dario Sarlo | May 21, 2018

Cover designs may have come a long way over the years, but ISACA has stayed focused on sharing relevant information with its members, as seen in this collection of EDP Auditor issues. ISACA’s publication archive traces technology news from the 1970s to the present.

The EDP Auditor, 1978

Category: isaca50 

Tags: publication, EDPAA 

By: Dario Sarlo | May 16, 2018

As technology has evolved over ISACA’s 50-year history, so has the threat landscape. What we now refer to as “cybersecurity” has taken different shapes and names over the decades.

In the 1970s and 1980s, enterprises often focused on physical security—protecting computer rooms and equipment. As information systems expanded and connected more people in the late ‘80s and ‘90s, security capabilities needed to grow to address new threats, including software piracy and hacking.

Along the way, ISACA provided professionals with tools for navigating the world of what came to be called cybersecurity, such as Cybersecurity Nexus (CSX), launched in 2014.

As we navigate the current environment of data breaches, ransomware attacks and new technologies such...

Category: isaca50 

Tags: conferences, CSX, cybersecurity 

By: Dario Sarlo | May 09, 2018

In 1996, ISACA had a big dream: to launch a new framework, then called COBiT (Control Objectives for Information and related Technology). Its goal was to help organizations of all sizes, and in all industries, govern and manage their information and technology. “CobiT is going to totally change how IS professionals work,” the association proclaimed on its website in 1996.

The original COBiT was delivered to users on diskette. Today’s COBIT community can simply download the framework and can both learn and leverage COBIT 5 through training, full day COBIT-related workshops facilitated by industry experts at ISACA conferences, newsletters, an online community and other online resources. ISACA has worked to link COBIT with CMMI tools in r...

Category: isaca50 

Tags: COBIT 

By: Dario Sarlo | April 30, 2018

Eugene Frank was among the original incorporators who signed the EDPAA into existence in 1969. He was also the second president, serving from 1972 to 1973. Eugene was instrumental in reconstituting the organization after it came to a standstill in 1971. We captured his story on camera for the anniversary.

ISACA incorporator Eugene Frank.

Category: isaca50 

Tags: presidents, EDPAA, USA 

By: Dario Sarlo | April 23, 2018

We recently interviewed Marian King, ISACA’s first employee. In the mid-1970s, Marian lived next door to Gerry Meyers (EDPAA President, 1976-77). Gerry needed help running the fast-expanding organization, so he hired Marian as the association’s secretary. Marian’s stories will be shared during the anniversary year.

ISACA employee #1 Marian King flips through early photographs.

Category: isaca50 


By: Dario Sarlo | April 16, 2018

It can often take time to navigate opportunities when first joining a large global association. Krysten McCabe, past ISACA Board Director and former member of the Audit and Finance committees, Awards Working Group and the Journal Review Team, recalls her experience finding her niche.
“I liken ISACA to going to a large university. Until you get involved, it seems really big and overwhelming. But once you do, you start to reap the benefits,” McCabe said. “I think everyone has a place. It's just taking the initial step to figure out where that is, and having confidence in yourself that you can actually make a difference in the organization, no matter where you are in your career or where you live.”
Over its nearly 50 years, ISACA has been presen...

Category: isaca50 

Tags: conferences, volunteering 

By: Dario Sarlo | April 12, 2018

In preparation for the anniversary year, we’re conducting oral history interviews with legends from our earliest years. Here’s Howard (Bud) Friedman (EDPAA President, 1973-1974) preparing for his interview at home in Los Angeles. We’ll be featuring this footage throughout the anniversary year. Watch this space.

Howard (Bud) Friedman with video crew members as they prepare to record.

Category: isaca50 

Tags: presidents, EDPAA, USA 

By: Dario Sarlo | April 09, 2018

ISACA conference activities come in all shapes and sizes. At the 1985 National Conference in Brisbane, Australia, a booth for the Residence Inn offered a putting green for attendees to enjoy.
More recent conferences have included popular activities such as casino nights and group exercise between sessions.

The Residence Inn booth at the 1985 National Conference in Brisbane, Australia

Category: isaca50 

Tags: conferences, Australia 

By: Dario Sarlo | April 02, 2018

By the summer of 1976, ISACA was expanding rapidly, both in the United States and internationally, with chapters in Mexico and Sydney. Today, ISACA has more than 200 chapters around the world. As ISACA and the founding Los Angeles chapter celebrate 50 years in 2019, many other chapters will reach their own milestones. Three chapters will celebrate 45 years: Utah, National Capital Area and Philadelphia.

1976 EDP Auditor Journal, summer edition

By: Dario Sarlo | March 26, 2018

Technology marvels came fast and furious in the 1970s, including the arrival of email (1971), the compact disc (1972) and modems that enabled computers to talk to each other over phone lines (1973). By the end of the decade, more than half a million computers were in use in the United States. However, technology continued to move faster than controls. In 1977, only 15 percent of corporations polled had an EDP audit function.

ISACA cartoons reflected the increased speed of technology, often faster than internal protocols.

Category: isaca50 

Tags: technology, auditing 

By: Dario Sarlo | March 20, 2018

The year 2000 (Y2K), also known as the “millennium bug,” prompted well-founded concerns in enterprises around the globe.

“For Year 2000 projects, everything is negotiable, except the deadline,” wrote ISACA, which guided enterprises through numerous programs and three publications: An Executive’s Guide to the Year 2000, Year 2000 Management Assessment Guide and Contingency Planning for the Year 2000.

Due in part to ISACA education (not to mention tens of billions of dollars in computer repairs and upgrades), the clock turned to 1 January 2000 without major problems in computer systems around the globe.

"An Executive’s Guide to the Year 2000: What You Need to Know About Your Computer Systems and How to Ensure They Will Survive," written by Robert G. Parker, ISACA past president.

Category: isaca50 

Tags: publication, Y2K 

By: Dario Sarlo | March 15, 2018

Industry leaders of the day attended ISACA’s first conference in June 1973. The list included heavyweights such as McDonnell Douglas, Northrop, Hughes Aircraft and Rockwell International; major accounting firms like Arthur Andersen, Coopers & Lybrand and Price Waterhouse & Co.; and government representation from the IRS, the U.S. Navy and the Department of the Treasury.

This table of contents includes the presentations given at the first conference, starting with the keynote, “EDP Auditing: A Coming of Age.”

Category: isaca50 

Tags: conferences 

By: Dario Sarlo | March 07, 2018

As tech innovations were coming fast and furious by 1990, EDP Auditors Association (EDPAA) leaders recognized the need to serve not only EDP auditors, but also information systems control and security professionals. Through member surveys, market research and discussion of opportunities and options, the value of a new name and identity became clear.

Nearly a dozen new names for the association were considered, including Organization for Audit of Systems and Information Security (OASIS). At the end of the deliberations in 1994, EDPAA became Information Systems Audit and Control Association, or ISACA—positioning us for the 21st Century

Article from Global Communique, Volume 1, 1992

Category: isaca50 

Tags: name change, EDPAA 

By: Dario Sarlo | March 02, 2018

In the days before e-mail, newsletter and survey mailings were prepared manually by ISACA (then EDPAA) staff and volunteers. In 1980, working full days and overtime over the course of three weeks, a small team mailed out a total of 6,000 Common Body of Knowledge (CBK) Project Surveys to ISACA newsletter recipients.
The ISACA (then EDPAA) team, from left to right: Laura Bulatek, Marian King and Marge Umlor.

Category: isaca50 

Tags: newsletters, CBK, communication 

By: Dario Sarlo | February 22, 2018

Russ Quinn, an auditor from Rockwell International, delivered the keynote speech at ISACA's first conference in 1973. In his speech, Quinn advocated for greater investment in IT governance by citing the then-immense sum of $ 23 billion that Americans spent annually on EDP.
From ISACA's first conference program, 1973

Category: isaca50 

Tags: conferences 

By: Dario Sarlo | February 19, 2018

A 1986 conference presenter makes a visual case that IBM’s documentation would overwhelm an auditor.

Category: isaca50 

Tags: IBM, documentation 

By: Dario Sarlo | February 14, 2018

EDPAA hosted its "first annual" conference in June 1973. 208 members met for two days in Santa Monica, California, to discuss “EDP Auditing: A Coming of Age.”
Cover page of the first conference program

Category: isaca50 

Tags: conferences 

By: Dario Sarlo | February 06, 2018

Then-EDPAA International President Michael P. Cangemi passes the president’s gavel to incoming International President Robert G. Parker, effectively moving the presidency from New York City to Victoria, BC.
Robert Parker (left) and Michael Cangemi (right), 1986.

Category: isaca50 

Tags: presidents 

By: Dario Sarlo | February 01, 2018

This was the headline emblazoned across the organization’s EDP Auditor Update during the summer of 1982. The announcement celebrated the purchase of an IBM Datamaster for the administrative office, with the goal of computerizing many previously manual tasks.

EDP Auditor Update, July-August 1982, Vol. VII, No. 4, 1.

Category: isaca50 

Tags: technology, publication, IBM 

By: Dario Sarlo | December 18, 2017

Past ISACA presidents have been sending us their historical material, including Fred Archer, Michael Cangemi, and Robert Parker. Among other things, we’ve received old ISACA/EDPAA publications, photographs, interesting correspondence, and a copy of the EDPAA articles of incorporation.
Michael Cangemi, on the cover of EDP Auditor Update, 1986.

Category: isaca50 

Tags: presidents