Once what is being audited has been decided, the objective of the audit needs to be established. Why is it being audited? From an auditor’s perspective, it is advisable t… See more

Once the objectives for the audit have been defined, the planning and scoping process should identify all areas and aspects of cybersecurity to be covered. In other words, what are th… See more

Now that the risk scenarios have been identified (figure 2), they should be evaluated to determine their significance. Conducting a risk assessment is critical in setting the f… See more

At this stage of the audit process, the audit team should have enough information to identify and select the audit approach or strategy and start developing the audit program.12… See more