According to The IIA’s OnRisk 2020 Report, cybersecurity is the top risk faced by organizations. The report states, “The growing sophistication and variety of cyberattacks continue to wreak havoc on organizations’ brands and reputations, often resulting in disastrous financial impacts.” With innovations, including automation, cloud, and mobile computing, not to mention customer preferences moving toward self-service from any device throughout the world, having a basic understanding of cybersecurity is crucial for today’s operational auditor. Internal auditors are expected to be cyber savvy and able to assess whether organizations are sufficiently prepared to manage cyber threats that could cause disruption and reputational harm.
Are you up to the challenge?
This introductory course provides a comprehensive overview of key cybersecurity concepts that can be used to facilitate audit efforts within your organization. It examines directive, preventive, detective, corrective, and mitigating controls, and how to apply each within the audit process. Finally, commonly accepted frameworks, standards, and guidelines are presented to prepare you to assess cybersecurity during operational audits.