Cyber security risk assessments should form part of every financial audit.