Internal Audit plays a vital role in the provision of assurance regarding the efficiency and effectiveness of the key cybersecurity processes and controls in insurance and reinsurance undertakings.
Risk in Focus is an annual barometer of what CAEs perceive as their organisations’ risk priorities and what is preoccupying their thinking as they prepare their forthcoming audit plans.
There is a need for organisations to develop a better understanding and a common language for risk culture. In this article I wish to demonstrate how this is possible and what tools are available to guide this process.
The three steps of cyber risk management improvement .
