Auditor Evaluation and Reporting on Cybersecurity Risks

View Sample PDF

Author(s): Jeffrey S. Zanzig (Jacksonville State University, USA)and Guillermo A. Francia III (University of West Florida, USA)
Copyright: 2021
Pages: 18
Source title: Encyclopedia of Organizational Knowledge, Administration, and Technology
Source Author(s)/Editor(s): Mehdi Khosrow-Pour D.B.A. (Information Resources Management Association, USA)
DOI: 10.4018/978-1-7998-3473-1.ch082

Keywords: Administration & Leadership / Business & Management / Business and Organizational Research / Business Science Reference

Purchase

View Auditor Evaluation and Reporting on Cybersecurity Risks on the publisher's website for pricing and purchasing information.

Abstract

Tremendous improvements in information networking capabilities have brought with them increased security risks resulting from the deterioration of the ability of a physical layer of computer security to protect an organization's information system. As a result, audit committees have had to deal with new security issues as well as the need to understand the cyber perpetrator and ensure the proper training of employees to consider cybersecurity risks. Standard setters including the Institute of Internal Auditors and the American Institute of Certified Public Accountants have issued guidance about lines of defense and reporting on an entity's cybersecurity risk management program and controls, respectively. Each of these topics is considered along with how cybersecurity guidance from COBIT, the National Institute of Standards and Technology, and the Center for Internet Security can be mapped into five cyber infrastructure domains to provide an approach to evaluate a system of cybersecurity.

The IRMA Community

Research IRM

Auditor Evaluation and Reporting on Cybersecurity Risks

Purchase

Abstract

Related Content

IRMA Sponsors