CYBERSECURITY AUDIT/ASSURANCE

Massive cybersecurity breaches have become almost commonplace and many of us are not just the readers of the news about these attacks, but we have experienced them on our own. The natural reaction of the society and professional organizations is to develop tools helping organizations to face this problem. The consequence of this situation is that there exist the whole set of different regulations, guidelines, programs, norms, etc. and organizations being aware of the cyber risks are not sure where to start, what regulation to be compliant with, what money invest. The article deals with the different types of cyber security audit/assurance in relation to the different layers of the complex cybersecurity control environment.