Cybersecurity/Information Security
![gi-956657212 gi-956657212](/content/aicpa/interestareas/informationtechnology/resources/information-security-cybersecurity/_jcr_content/main/background/background-par/columncontrol/column-1/image.img.jpg/1532092011259.jpg)
Breaking news stories about malware attacks, scams, hacks and identity theft have become commonplace in today’s headlines. Cybersecurity threats are escalating, unnerving the boards of directors, managers, investors and other stakeholders of public and private organizations of all sizes. These organizations are under increasing pressure to demonstrate that they are managing threats and have effective processes and controls in place to detect, respond to, mitigate and recover from security incidences.
RESOURCES
- Working from Everywhere - Rebooting Securely
- Crisis Management Checklist
- Crisis Management: Using Technology to Securely Work from Home
- Managing Cyber Risk in a Remote Work Environment
- Managing Cybersecurity Risk FAQs
- Cybersecurity Resource Center
- System and Organization Controls: SOC Suite of Services Resource Center
- What is the Dark Web? | CNBC Explains - YouTube
- Cybersecurity – Homeland Security
- VIDEO: Discover how high-tech investigations can benefit from low-tech solutions
- VIDEO: When hacking is ethical: Managing cybersecurity risk for the good guys
- VIDEO: Make it safe: Using and preparing reports for SOC® for Cybersecurity
- VIDEO: Understand the parameters and uses of a SOC 2+ engagement
LEARNING
- Certificate Exam – Advanced SOC for Service Organizations
- CPE – Cybersecurity Fundamentals for Finance and Accounting Professionals Certificate
- CPE – Cybersecurity Advisory Services Certificate Program
- CPE – SOC for Cybersecurity Certificate Program
- CPE – Introduction to SOC for Service Organizations Reporting
- Podcast - Cybersecurity and Financial Services
- Podcast - SOC 2®
- Podcast - SOC 2® Privacy Principles
- Publication – Reporting on an Entity's Cybersecurity Risk Management Program and Controls – Attestation Guide
- Publication – SOC 2® Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy Guide
- Publication – Reporting on an Examination of Controls at a Service Organization Relevant to User Entities' Internal Control Over Financial Reporting (SOC 1®) Guide