Information Systems Audit and Control Association Inc
Public records raise at least one point you should look into before giving.
What it says it does
Information Systems Audit and Control Association (ISACA) serves individuals and enterprises by being a leading global provider of knowledge, certifications, community, advocacy and education on information systems assurance and security, governance, risk, privacy, and other related digital trust topics. Founded in 1969, ISACA sponsors international conferences, publishes the ISACA Journal, conducts and publishes research, provides benefits globally to more than 189,000 members in more than 188 countries and develops international information systems auditing and control standards. ISACA also administers the globally respected Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT), Certified in Risk and Information Systems Control (CRISC), Certified Data Privacy Solutions Engineer (CDPSE), CSX Practitioner (CSX-P), Certified in Emerging Technology (CET) and Information.
- Income
- $117.1 million
- Spending
- $106.3 million
- Employees
- 316
- Volunteers
- 1,574
- Highest pay
- $1.3 million, secretary, director, & ceo
Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. How we rate
Financial health
We do not score finances when yearly spending is very small or the return has too little detail. The ratios stop meaning much at that size.
Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. How we rate
Governance
This return does not answer enough of the governance questions to score.
Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. How we rate
Impact evidence
Describes programs. Its tax return describes what it does but we have found no measurable results in it.
Programs described in its return (5)
- Information Systems Audit and Control Association's (ISACA) primary purpose is to serve its members and their organizations. One way ISACA does so is by helping members do their jobs better, offering them pragmatic guidance on how to safely and effectively implement technology. ISACA annually produces hundreds of knowledge assets in various formats, including print, digital, interactive (tools, audit programs), video and audio. In 2024, ISACA hosted a combination of in-person (ISACA Conference North America in Phoenix, USA, and ISACA Conference Europe in Dublin, Ireland) and virtual events. The association offers member benefits in the areas of professional development, community, mentoring and leadership and volunteer opportunities, and continually reviews and expands its portfolio of benefits to address the changing needs of members. Many member benefits are documented and further explained within the other responses on this form. ISACA added more than 39,000 new members in 2024. ISACA has 228 local chapters in 100 countries.
- Information technology (IT) is a rapidly changing industry, and it demands a commitment on the part of its practitioners to learn continuously and master new skills. Certification is one way to expand one's skill set and be recognized for doing so. Holding an ISACA professional certification demonstrates excellence in the topic and a commitment to remaining current and informed; it distinguishes an individual from his/her peers. ISACA offers several certification exams: Certified Information. Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT), Certified in Risk and Information Systems Control (CRISC), Certified Data Privacy Solutions Engineer (CDPSE) and CSX Practitioner (CSX-P) designations. More recently, ISACA introduced stackable certificates that add up to a full certification for the Certified in Emerging Technology (CET) and Information Technology Certified Associate (ITCA) credentials. More than 210,000 CISAs have been certified since its inception in 1978; more than 100,000 CISMs have been certified since its inception in 2002; more than 10,000 CGEITs have been certified since its inception in 2007, more than 40,000 CRISCs have been certified since its inception in 2010 and more than 16,000 CDPSEs have been certified since its inception in 2020. ISACA, in collaboration with the Cloud Security Alliance, also offers a Certificate of Cloud Auditing Knowledge (CCAK). Additionally, ISACA offers an IT Audit Fundamentals Certificate, Cybersecurity Audit Certificate, IT Risk Fundamentals Certificate, Blockchain Fundamentals Certificate and Computing Fundamentals Certificate.
- In 2024, the ISACA education roster included virtual and in-person ISACA conferences in several regions covering a range of topics such as IT audit, IT governance, risk management, cybersecurity and data privacy. This was in addition to week-long training events focusing in-depth on one or two topics. ISACA is dedicated to monitoring the professional environment and developing new programs as needed to complement its established portfolio of events. The association has focused a considerable amount of effort on digital learning platforms, as it provides a way to cover emerging topics on a timely basis and offer low-cost education to a globally dispersed audience.
- ISACA targets two goals with its activities: helping professionals realize the positive potential of technology and inspiring confidence that enables innovation through technology. The association achieves those activities by providing information, standards, publications, and academic guidance (in addition to the items noted in the descriptions of program achievements 1, 2 and 3). The ISACA Journal is ISACA's official magazine. Issued bimonthly, and supplemented in the off months by online articles, the Journal seeks to enhance the proficiency and competitive advantage of its international readership by providing peer-reviewed managerial and technical guidance from experienced global authors. It is available in digital format on the website and via mobile app. ISACA also produces @ISACA, a biweekly electronic newsletter dedicated to ISACA news. The ISACA Bookstore offers a selection of peer-reviewed publications on professional topics of interest to ISACA members, at discounted prices. New selections are added regularly, to ensure the catalog remains current with changing trends and member needs. ISACA continues to expand the platforms and languages in which its content is available to its professional community. The Publications team provided translations of many of its publications, including certification exams, study aids, ISACA Journal articles, COBIT 2019 and other research publications. Languages included Chinese, Simplified, French, German, Japanese, Korean and Spanish. ISACA issues Information Systems Auditing Standards, Guidelines and Procedures, which provide prescriptive or suggested guidance on how audits should be undertaken. The standards, guidelines and procedures are continually reviewed to ensure that new ones are developed or existing ones are revised as needed to align with new regulations or technologies.
- (Expenses $ including grants of $) ISACA targets two goals with its activities: helping professionals realize the positive potential of technology and inspiring confidence that enables innovation through technology. The association achieves those activities by providing information, standards, publications, and academic guidance (in addition to the items noted in the descriptions of program achievements 1, 2 and 3). The ISACA Journal is ISACA's official magazine. Issued bimonthly, and supplemented in the off months by online articles, the Journal seeks to enhance the proficiency and competitive advantage of its international readership by providing peer-reviewed managerial and technical guidance from experienced global authors. It is available in digital format on the website and via mobile app. ISACA also produces @ISACA, a biweekly electronic newsletter dedicated to ISACA news. The ISACA Bookstore offers a selection of peer-reviewed publications on professional topics of interest to ISACA members, at discounted prices. New selections are added regularly, to ensure the catalog remains current with changing trends and member needs. ISACA continues to expand the platforms and languages in which its content is available to its professional community. The Publications team provided translations of many of its publications, including certification exams, study aids, ISACA Journal articles, COBIT 2019 and other research publications. Languages included Chinese, Simplified, French, German, Japanese, Korean and Spanish. ISACA issues Information Systems Auditing Standards, Guidelines and Procedures, which provide prescriptive or suggested guidance on how audits should be undertaken. The standards, guidelines and procedures are continually reviewed to ensure that new ones are developed or existing ones are revised as needed to align with new regulations or technologies.
Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. How we rate
Legitimacy checks
Is it registered with the IRS? Passed.
Listed in the IRS master file of tax-exempt organizations as a 501(c)(6) business league.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.
Has the IRS revoked its tax-exempt status? Passed.
Not on the IRS automatic revocation list.
Source: Automatic revocation of exemption list, Internal Revenue Service, file dated October 13, 2026.
Are donations tax-deductible? Caution.
The IRS master file records contributions to this 501(c)(6) business league as not deductible.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.
Is it keeping up with its IRS filings? Passed.
Most recent return on file covers the year ending December 2024.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.
How long has it been tax-exempt? Passed.
Recognized by the IRS since February 1974.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.
Is it in good standing with state regulators? Passed.
Not on California's list of charities barred from soliciting. Other states are not yet checked.
Source: May Not Operate or Solicit for Charitable Purposes list, California Attorney General, Registry of Charities and Fundraisers, file dated October 21, 2026.
Ratings and checks are our reading of public records, using the published method. They are not a statement about anyone's honesty. If you work for this organization, you can send corrections or results, confirm you want gifts through Veridonate, or ask to be removed from giving.