USEFUL STANDARDS AND FRAMEWORKS

• ISO 27001
• NIST Cybersecurity Framework
• COBIT
• FFIEC Cybersecurity Assessment Tool (CAT)
• IIA Standards
• PCAOB

STANDARDS ARE:

• Enforceable
• Formalized requirements
• Basis for certification

GUIDANCE, FRAMEWORKS ARE:

• Recommended
• Less formal
• Basis for assessment

CONTINUOUS AUDITING, PER THE JOURNAL OF ACCOUNTANCY, INCLUDES:

• Establish priority areas.
• Identify audit rules.
• Determine process frequency.
• Configure parameters and execute.
• Manage results and follow up.
• Report results.
• Assess emerging risks and add them to the risk register.