گزارش‌دهی در مورد برنامه و کنترل‌های مدیریت ریسک سایبری یک نهاد: SOC برای سایبری

This guide delivers information on how to implement a cybersecurity risk management reporting framework. It provides certified public accountants with guidance on how to perform and report on an examination of an organization's enterprise-wide cybersecurity risk management program. Abstract: This guide delivers information on how to implement a cybersecurity risk management reporting framework. It provides certified public accountants with guidance on how to perform and report on an examination of an organization's enterprise-wide cybersecurity risk management program Created by the AICPA, this authoritative guide provides interpretative guidance to enable accountants to examine and report on an entity's cybersecurity risk managementprogram and controls within that program. The guide delivers a framework which has been designed to provide stakeolders with useful, credible information about the effectiveness of an entity's cybersecurity efforts. Content: Introduction and background -- Accepting and planning a cybersecurity risk management examination -- Performing the cybersecurity risk management examination -- Forming the opinion and preparing the practitioner's report.