Call us now:
Tom McLeod, Governance of cybersecurity risk management is being regulated across the EU and US and Australian regulators are ‘dancing’ with the notion of regulating Governance of cyber for the public and private sectors.
We know that the EU has made it clear companies covered under EU DORA and EU NIS 2 must demonstrate oversight and assurance of cybersecurity risk, or face civil and or criminal penalties. Yet we see little ‘noise’ being made by the internal or external audit community about the standards, strategies, resources and qualifications necessary to equip audit communities with the tools necessary to rise to these regulatory challenges. EU NIS 2 alone will affect 150,000 companies, and require organisations to demonstrate their management of cyber risk.
Internal audit needs AI to oversight and assure the number of companies required to demonstrate management of cybersecurity. There simply isn’t enough qualified or experienced resources available. An issue that one has seen coming for many years and no amount of raising the flag has made much difference.
It’s clear that AI is coming for internal auditors lunch. While it won’t replace a person, AI enables internal and external audit to complete cyber audits quicker, to the same level of quality and at a reduced risk when compared to a person.
Faisal Khan Bryan Foss Liz Sandwith CFIIA Rob Beswick David Campbell Michael G. Jacobides Dan Miles Matthew Doll Georgios Alevras
Aegis Labs
#internalaudit #cyberaudit #externalaudit
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7350496646671015938