Opening Remarks & Introduction

CYBERSECURITY OVERVIEW

• Cybersecurity: Technology & Trends
• The Cyber Threat Landscape
• Defense-in-Depth & Layered Security
• Cyber Resilience

CYBERSECURITY GOVERNANCE

• Overview of Cybersecurity governance
• Cyber Risk as Strategic Risk
• External Standards & Frameworks
• The NIST Cyber Security Framework
• Cybersecurity Policies and Procedures

CYBERSECURITY OPERATIONS

• Key Cybersecurity Risks
• Critical Cybersecurity Controls
• The IIA Three-Lines of Defense Model for Cybersecurity
• Threat and Vulnerability management
• Essential datacenter, cloud, firewall and network security technologies
• Key Processes Set 1: asset, identity, configuration, change, and patch management
• Key Processes Set 2: third party vendor management and software development lifecycle management

THE AUDITOR’S ROLE IN CYBERSECURITY

• Preparing for a Cybersecurity Audit Engagement

AUDITING CYBERSECURITY GOVERNANCE

• Practical Audit Exercise on Cybersecurity Governance

AUDITING CYBERSECURITY OPERATIONS

• Practical Audit Exercise on Cybersecurity Operations