top of page
  • Writer's pictureDaniel Goelzer

The CAQ on Auditors and Cybersecurity Disclosure

The Center for Audi Quality has released The Role of Auditors in Company-Prepared Cybersecurity Information: Present and Future. The CAQ provides an overview of the SEC’s requirements regarding cybersecurity risks and of the types of disclosures that companies have made concerning cybersecurity, both in response to those requirements and voluntarily. The publication also focuses on the role that cybersecurity risk plays in the financial statement audit and how auditors are addressing cybersecurity risks. The CAQ outlines additional advisory or attestation services that auditors could provide (subject to the independence requirements) to “bring discipline to management’s voluntary cybersecurity disclosures and to the organization’s cybersecurity risk management program.” The final section of the paper lists considerations and key questions the board may want to consider when it engages in discussion regarding cybersecurity information with management and the auditor. While not aimed specifically at audit committees, the CAQ’s publication is useful background on cybersecurity oversight.

8 views0 comments

Recent Posts

See All

In 2022, the average audit fees for an SEC-registered public companies increased 11 percent over 2021 and hit an all-time high of $2.24 million. That is the headline finding of 20-Year Review of Audi

The PCAOB’s proposal to broaden the scope of the auditor’s responsibilities for audit client noncompliance with laws and regulations (NOCLAR) is attracting an unusually high level of comment from audi

bottom of page