IIA Assessing Cybersecurity Risk: Roles of the Three Lines of Defense

With the frequency and severity of cyberattacks on the rise, there is a significant need for improved cybersecurity risk management. Cybersecurity concerns have a tremendous impact on overall organizational strategy and must be considered holistically and systemically. The effects of cybersecurity failure can range from an inability to conduct basic transactions to a loss of intellectual property and reputational damage; therefore, it is imperative that internal auditors understand their role in support of an organization’s cyber-related initiatives. Participants of this course from the Institute of Internal Auditors (IIA)will gain an understanding about cybersecurity and the controls required to mitigate threats, distinguish the roles of the three lines of defense in cybersecurity, and increase their knowledge about audit approaches to cybersecurity. The course elaborates on planning and performing an engagement by addressing key risks.