Page 413 - ITGC_Audit Guides

International Organization for Standardization/International Electrotechnical Commission
ISO is an independent, nongovernmental international organization with a membership of 161
national standards bodies. Through its members, it brings together experts to share
knowledge and develop voluntary, consensus-based, market relevant international standards
that support innovation and provide solutions to global challenges. IEC is the world’s leading
organization for the preparation and publication of international standards for
electrotechnologies (electrical, electronic and related technologies). When appropriate, IEC
cooperates with ISO to ensure that international standards fit together seamlessly and
complement each other. https://www.iso.org

INTERPOL

INTERPOL is the world’s largest international police organization, with 192 member countries.
INTERPOL publishes general guidance on cybercrime and cyber-enabled crime.
https://www.interpol.int/Crime-areas/Cybercrime/Cybercrime

National Institute of Standards and Technology

NIST’s Cybersecurity Framework is a set of standards and best practices, created through the
collaboration between the public and private sector, to help organizations manage cybersecurity
risks. The framework uses a common language to address and manage cybersecurity risks in a
cost-effective way based on business needs. https://www.nist.gov/cyberframework

www.theiia.org Auditing Insider Threat Programs 45