Page 168 - ITGC_Audit Guides

Contents

Executive Summary.................................................................................................................................. 1

Introduction ............................................................................................................................................. 2
IT-IS Control Frameworks ............................................................................................................................... 3

Cybersecurity GTAGs ...................................................................................................................................... 4
Objectives ....................................................................................................................................................... 4

Cybersecurity Operations Controls .......................................................................................................... 5
Security in Design ........................................................................................................................................... 5

Prevention .................................................................................................................................................... 11
Detection ...................................................................................................................................................... 14

Conclusion ............................................................................................................................................. 18

Appendix A. Relevant IIA Standards and Guidance ................................................................................ 19

Appendix B. Glossary ............................................................................................................................. 20
Appendix C. References ......................................................................................................................... 24

Acknowledgements ............................................................................................................................... 25

theiia.org