Call us now:
Audit, the third Line of Defense, are a critical function in the oversight, assurance and attestation of cybersecurity risk management. Audit provides independent assurance of compliance to cyber regulation such as the SEC Final Rule, EU NIS 2 or DORA. Important for board attestation, written for good reason into our board governance process (https://lnkd.in/eGyNKvZc).
The audit function faces a significant challenge however. If the figures quoted in the enclosed are correct and only 30% of auditors rang cybersecurity as a No 1 priority, more needs to be done to communicate the challenges of cybersecurity risk management and regulatory compliance. Any governance framework the board uses to oversight and assure cybersecurity risk management, includes sub committees such as audit. Chief Audit officers are Accountable Executives and have a responsibility to ensure board assurance of cybersecurity risks. In many recent SEC 10K filings, the audit function is seen as the one that manages cyber risk oversight, assurance and manages cyber risk Andrew Hoog.
Audit committees play a critical important role in board assurance and attestation of cybersecurity risk. That is increasing becoming a legal and compliance issue. Requiring auditors and audit committee members demonstrate appropriate knowledge, skills and experience of cybersecurity, risk management and audit Brian D. McCarthy. Capabilities that will see auditors questioned about the audit schedules, risk assessments, audit process and recommendations. A legal and compliance process that will be evaluated by boards, regulators and lawyers.
Veritas GRC 327 Solutions, Inc. @Thaddeus Dziekanowski Rich Waite, M.Ed. George Sawyer The Institute of Internal Auditors Inc. ECIIA | European Confederation of Institutes of Internal Auditing Brian Levine Johnathan Rudy Ryan Buckner
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7174709731712733184