The Center for Audi Quality has released The Role of Auditors in Company-Prepared Cybersecurity Information: Present and Future. The CAQ provides an overview of the SEC’s requirements regarding cybersecurity risks and of the types of disclosures that companies have made concerning cybersecurity, both in response to those requirements and voluntarily. The publication also focuses on the role that cybersecurity risk plays in the financial statement audit and how auditors are addressing cybersecurity risks. The CAQ outlines additional advisory or attestation services that auditors could provide (subject to the independence requirements) to “bring discipline to management’s voluntary cybersecurity disclosures and to the organization’s cybersecurity risk management program.” The final section of the paper lists considerations and key questions the board may want to consider when it engages in discussion regarding cybersecurity information with management and the auditor. While not aimed specifically at audit committees, the CAQ’s publication is useful background on cybersecurity oversight.
top of page
Search
Recent Posts
See AllTwo annual reports on audit and other fees paid to auditors have been released, and both reach the same conclusion: Fees hit a new high...
390
The U.S. members of the six global network accounting firms issue annual audit quality reports. These reports describe the firm’s...
380
The Securities and Exchange Commission has postponed its decision whether to approve the PCAOB’s firm and engagement performance metrics...
380
bottom of page
Comments