Reputational damage, disruption of business operations, fines, litigation, and loss of business can all be consequences of a cybersecurity attack. Because of these consequences and the vast threat landscape, the AICPA saw a need in the industry that it...
More
Reputational damage, disruption of business operations, fines, litigation, and loss of business can all be consequences of a cybersecurity attack. Because of these consequences and the vast threat landscape, the AICPA saw a need in the industry that it could fill: a general use report that describes an organization’s cybersecurity risk management program and verifies the effectiveness of its controls. Thus, SOC for Cybersecurity was created. In April 2017, the AICPA announced its new cybersecurity risk management reporting framework, paired with a market-driven, voluntary SOC for Cybersecurity examination.
Less