The Internal Auditor Role after Cyber-Attack
Date: 5 May 2023
Time: 09:00 – 17:00
Course director: Mark DEKEYSER
The risk of a cyber-attack is always possible, no matter how secure your business seems to be. The capability of the organization to manage associated risks is something that many audit committees and boards have set as an expectation for internal audit. Although the Incident Response team will take center stage during the immediate response to a cyber-attack, Internal Audit’s most important role is during containment and recovery after the fact. The organization should be able to keep ahead of potential threats and lessen the impact of potential cyber-attacks with the use of audit’s capacity to give impartial analysis and support during the post-mortem, to use lessons learned, and to conduct a post-incident review.
Participants will become familiar with the components of the internal audit response plan, risk response framework of a cyber-attack and their responsibility to enhance cybersecurity processes by providing recommendations based on audits conducted at various levels of the organization with respect to cybersecurity.
This course has been designed for senior auditors and head of internal audit departments, who are entitled with a managing role.
Please note: If you are a bank employee, please contact the bank’s human resources department for information and registration.