Cookie Notice

Last Updated: 11 September 2024

This Cookie Notice explains how the Information System Audit and Control Association, Inc., and the CMMI Institute LLC (collectively “ISACA”, “we” or “us”) use cookies and other tracking technologies when you visit our websites, pages, features, mobile applications, or technology that we own or operate (collectively, the “Services”). We encourage you to read the full notice so that you understand the information we collect using cookies and other tracking technologies, how we use that information, and how you can customize your cookie preferences. If we update this Cookie Notice, we will post the updated Cookie Notice on this page showing a the revised date above.

What Are Cookies?

When you access our Services, we or other companies we work with may place cookies on your computer or other device. Cookies are small files, typically of letters and numbers, downloaded onto your computer. When you return to these websites, or visit other websites that use the same cookies, the websites recognize these cookies and your browsing device. A cookie cannot read data off your hard drive or read cookie files created by other websites.

Cookies that we set are called first party cookies. We also use third-party cookies, which are cookies from a domain different that our domain, and are typically for analytics, marketing or advertising purposes. The parties that set third party cookies can recognize your web browser both when it visits the ISACA website and when it visits certain other websites where the third party’s cookies are also present.

The length of time a cookie will stay on your browsing device depends on whether it is a “persistent” or “session” cookie. Persistent cookies stay on your browsing device until they expire or are deleted. Session cookies will only stay on your device until you stop browsing. We may place cookies from third-party service providers who may use information about your visits to other websites to target advertisements for products and services available from us. We do not control the types of information collected and stored by these third-party cookies. You should check the third-party’s website for more information on how they use cookies.

What Other Tracking Technology Does ISACA Use?

We may also use other Tracking Technologies to collect “clickstream” data, such as the domain name of the service providing you with Internet access, your device type, IP address used to connect your computer to the Internet, your browser type and version, operating system and platform, the average time spent on our Services, webpages viewed, content searched for, access times and other relevant statistics, and assign unique identifiers to the device or other credentials you use to access the site for the same purposes.

Some of our website pages and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity). Some of our website pages may also contain social media widgets, which are buttons or icons provided by third-party social media providers that allow you to interact with those social media services when you view a web page or mobile app screen. These social media widgets may collect browsing data, which may be received by the third party that provided the widget, and are controlled by the third parties.

Pages of our Services may also use Java scripts, which are code snippets embedded in various parts of websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components; entity tags, which are HTTP code mechanisms that allow portions of websites to be stored or “cached” within your browser to accelerate website performance; and HTML5 local storage, which allows data from websites to be stored or “cached” within your browser to store and retrieve data in HTML5 pages when the website is revisited.

Why Does ISACA Use Cookies and Other Tracking Technology?

We use cookies for a variety of reasons. These technologies help us better understand your behavior of the our website, and inform us about which parts of our websites people visit. The following are some examples of why we have cookies and how we may use them:

To recognize new visitors to our web sites.
To recognize past customers.
To store your password if you are registered on our site.
To improve our website and better understand your visits on our platforms.
To integrate with third party social media websites.
To serve you with interest-based or targeted advertising (see below for more on interest-based advertising).
To observe your behaviors and browsing activities over time across multiple websites or other platforms.
To better understand the interests of our customers and our website visitors.
To collect information about your computer or other access device to mitigate risk, help prevent fraud, and promote trust and safety.

What Type of Cookies Are Used on ISACA’s Services?

The cookies used on our Services may be categorized as:

Strictly Necessary Cookies, which are needed for our site or Services to operate as reasonably expected by you.
Functional Cookies, which provide enhanced performance for some website resources and services as well as sometimes to adopt a higher level of personalization on user experience.
Performance or Analytic Cookies, which provide quantitative measurement of our website and its resources used for purposes like troubleshooting and analytics.
Targeting or Advertising Cookies, which are used to make advertising messages more relevant and personalized to you based on your inferred interests.

We and our partners display interest-based advertising using information gathered about you over time across multiple websites or other platforms. Interest-based advertising or “online behavioral advertising” includes ads served to you after you leave our website, encouraging you to return. They also include ads we think are relevant based on your browsing habits or online activities. Where legally required, we get consent to engage in interest-based advertising.

To decide what is relevant to you, we use information you make available to us when you interact with us, our affiliates, and other third parties. We gather this information using the tracking tools described above. For example, we or our partners might look at your purchases or browsing behaviors. We might look at these activities on our platforms or the platforms of others. We work with third parties who help gather this information.

For more information about the specific tracking technology used on the Services, please visit our Cookies Dashboard.

How Do I Adjust My Cookie Settings?

You have the right to decide whether to accept cookies. At any time you may change your cookies settings by visiting your ISACA Cookie Settings or by clicking on the ‘Cookie Settings’ hyperlink located in the footer of the ISACA or CMMI website and selecting your desired cookie settings.

You can also adjust your cookie settings by modifying your web browser setting to either (1) refuse some or all cookies or (2) notify you and ask for your permission when a website tries to set a cookie. If you want to learn the correct way to modify your browser settings, please use the “Help,” “Tools” or “Edit” menu in your browser or review the instructions provided by the following browsers: Internet Explorer, Google Chrome, Mozilla Firefox, Safari Desktop, Safari Mobile; and Android browser. If you choose to disable cookies in your browser, you can still use our Services, although your ability to use some of the features may be affected.

Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI), both of which maintain websites where people can opt out of interest-based advertising from their members. To opt out of website interest-based advertising provided by each organization’s respective participating companies, visit the DAA’s opt-out portal available at http://optout.aboutads.info/, or visit the NAI’s opt-out portal available at http://optout.networkadvertising.org/?c=1.

We may use third-party service providers to monitor and analyze the use of our Services. Presently, we use Google Analytics. Google Analytics is a web analytics service offered by Google LLC (“Google”) that tracks and reports website traffic. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: policies.google.com/privacy. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: tools.google.com/dlpage/gaoptout.

We use a tool called “Adobe Analytics” for analytics and advertising services. We use the information we get from Adobe Analytics to improve the Services and to improve our ad performance. Adobe’s ability to use and share information collected by Adobe Analytics about your use of the Services or visits to the Site or to another application which partners with Adobe, is restricted by Adobe Analytics Terms of Use and the Adobe Privacy Policy available at: http://www.adobe.com/privacy/marketing-cloud.html.

We also use remarketing services to advertise on third-party websites to you after you visited our Site or services. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Service. We use Google Ads for these purposes. Google Ads remarketing service is provided by Google. You can opt-out of this by visiting the Google Ads Settings page: google.com/settings/ads.

In relation to any of our mobile apps, we or our third party marketing partners may use one or more of several different identifiers for your mobile device, including Apple Identifier For Advertising (IDFA) or Android Advertising ID (AAID), to target and deliver ads to you in our app or other apps. This means that your device identifier may be accessed by third-party ad networks and used to (a) help manage the number and types of ads you see; (b) track the source of installs related to ads seen in other apps; and (c) identify your interests and behavior and target advertising to you based on those interests and behavior.

Apple requires app developers to ask for permission before they can track your activity across apps or websites they do not own in order to target advertising to you, measure your actions due to advertising, or to share your information with data brokers. If you previously gave our mobile app permission to track, you can tell our app to stop tracking your activity. On iOS or IPadOS, go to Settings, tap on our app, then tap to turn off Allow Tracking. You can also reset your IDFA from your mobile device’s settings page, which will prevent continued use of existing behavioral data tied to your previous IDFA.

If you have an Android device, and are running Android 12 or above, you can delete your AAID permanently by opening Settings, navigating to Privacy > Ads, tapping “Delete advertising ID,” then tapping it again on the next page to confirm. This will prevent any app on your phone from accessing it in the future. Please note that if you do so, you will still see advertisements, but they will not be tailored to your inferred interests.

You may also access industry-provided opt-out tools, although they are not tailored to our mobile applications. For instance, to opt-out of data collection by the Digital Advertising Alliance’s participating member companies for interest-based advertising across mobile applications, download the DAA’s App Choices mobile application opt-out offering at http://youradchoices.com/appchoices.