Skip to Content

2019 North American Pulse of Internal Audit: Cybersecurity and information technology risk

Industry Knowledge Brief The IIA May 28, 2019

​Provides insights on cybersecurity and IT risks for CAEs in financial services. Includes an action plan. 

IIA 2019 NA Pulse of Internal Audit - Cybersecurity and.pngPulse Report: Financial Services Focus on Cybersecurity

2019 Pulse of Internal Audit survey respondents report slow progress in building IT and cyber skills among their staffs. Also concerning, an "effort gap" is developing between the effort internal audit functions deliver on cybersecurity and the level CAEs believe they should provide. One potential action item is for CAEs to leverage boards' increasing interest and involvement in cybersecurity issues to discuss adjustments to audit plan allocations that could help close any existing effort gaps in this key risk area. This report provides specific feedback from — and solutions for — financial services internal auditors.

The IIA

The Institute of Internal Auditors