board oversight of cybersecurity risk

For years, cybersecurity occupied a strange place on Caribbean audit plans: acknowledged as important, deferred as specialist, and scoped down to whatever the function felt qualified to look at — usually access forms and password policies. The Global Internal Audit Standards have ended that accommodation. Cybersecurity is the subject of the first Topical Requirement —...