IT Governance, Risk & Controls

Corporate governance in COVID-19: Cybersecurity and technology considerations

The coronavirus pandemic has resulted in a realignment of company strategies to enable success during these disruptive times. Some of these decisions — such as the sudden shift to remote work due to stay-at-home orders — have created additional risk corporate boards must consider.

Stymie hackers with these 6 steps

Here is a list of the steps your business should be doing at the absolute minimum when it comes to cybersecurity.

Evaluating blockchain and internal control through a COSO lens

Although blockchain technology creates new risks, organizations also can use it to improve risk management and create better controls.

What to do before the cloud goes down

Tech experts weigh in on the steps firms can take to stay productive in the event of a cloud software outage.

4 key steps for auditors in assessing technology risks

The business risks associated with new technology seem almost endless. But a new resource can help auditors, management and audit committees discharge their responsibilities associated with those risks.

Cyber liability: Managing evolving exposures

Cyber liability exposures and regulations impacting CPA firms’ duties to protect confidential information have evolved significantly in recent years.

How board members can perform oversight of cybersecurity risks

A new tool can help board members understand what questions to ask in their oversight of cybersecurity risk management.

Cybersecurity tips from the ‘Shark Tank’

Shark Tank star and cybersecurity expert Robert Herjavec said CPAs have an important role to play as trusted advisers on cybersecurity.

Expect the unexpected: Risk assessment using Monte Carlo simulations

Modern computing power, combined with software including Microsoft Excel, can produce advanced statistical models to analyze the risks of business opportunities.

New model created for cybersecurity risk management

The AICPA framework enables organizations to communicate and creates a new engagement for CPAs to report.

Using Excel and Benford’s Law to detect fraud

This Technology Workshop shows how to use Microsoft Excel to determine whether the numbers in a data set follow Benford’s curve or point to possible malfeasance.

New path for CPAs in cyber risk management

AICPA proposals would guide design and evaluation of cyber risk management.

Technology risk: It’s more than cybersecurity

This column discusses the “silent killers” of technology risk that organizations must master to protect their business.

Bolster your data defenses

These steps can help close holes in your cybersecurity setup.

Explaining the 3 faces of SOC

This column provides updates and adds perspective on SOC and reflects on changes in the reports and their attestation standards.

Be vigilant about cybersecurity, warns former FBI agent

Chris Tarbell led FBI investigations that resulted in multiple high-profile cybercrime arrests. He shared his tips for cybersecurity during a presentation at the AICPA spring Council meeting.

5 steps CPAs can take to fight hackers

See what CPAs can do to fight cybercriminals’ threat.

How to mitigate vendor risk in a cybersecurity environment

Vendors represent one of the highest risk areas in an organization’s cybersecurity structure.

Use a layered cybersecurity approach to protect crown jewels

Layers of defense should exist in an organization’s systems, with the most sensitive information protected by the most layers.

How internal audit can help manage 10 top technology risks

Internal auditors can play a pivotal role in managing technology risks ranging from cybersecurity to social media. The risks are ranked in a new report that shows how internal audit can help manage them.