Practitioners and researchers from The IIA and EY conducted extensive analysis to determine the root cause of how and why boards within all industries get a skewed picture of their organizations’ ability to protect themselves from cyber-related risks with the requisite resiliency. The team identified six key questions that if unanswered likely mean a disconnect exists.
The Risky Six: Key questions to expose gaps in board understanding of organizational cyber resiliency
Global Perspectives and Insights The IIA Mar 15, 2021
The IIA
The Institute of Internal Auditors
Learn more with our other resources
All Things Internal Audit
Been There, Done That, Seen It All
Executive Webinar Playback
2025 GRC Drivers and Trends
Global Knowledge Brief
Cybersecurity Part 3: Establishing a New Zero-trust Boundary
Tone at the Top
A Focus on Top Risks
Getting Started With
The Global Internal Audit Standards: Domain V
Global Technology Audit Guides