COSO in the Cyber Age

The Committee of Sponsoring Organizations of the Treadway Commission (COSO) has released a new research report that provides direction on how the Internal Control-Integrated Framework (2013) and the Enterprise Risk Management-Integrated Framework (2004) can help organizations effectively and efficiently evaluate and manage cyber risks.

The report, authored by Mary E. Galligan, director, Cyber Risk Services, Deloitte & Touche LLP, and Kelly Rau, senior manager, Deloitte & Touche LLP, urges organizations to make cyber risk management a top priority.

The report suggests some key questions an organization should
ask:

• Are we focused on the right things?
• Are we proactive or reactive
• Are we adapting to change?
• Do we have the right talent?
• Are we incentivizing openness and collaboration?
• Can executive management articulate its cyber risks and explain its approach and
  response to such risks?

To read the report click here (PDF).