While corporations face varying cybersecurity needs in the digital age, they all have to heed a common demand: Does their cyber risk management effort meet their safety objectives?
It is a simple question, but often one which lacks a straightforward answer, in no small part because the language corporations use to assess cybersecurity risk management is anything but uniform. The American Institute of Certified Public Accountants (AICPA) is looking to change that, launching a set of standardized corporate cyber risk management evaluation criteria and a proprietary audit report. Called the “Cybersecurity Examination,” the voluntary and flexible evaluation is conducted by a certified accountant.
