Explain the cyber audit and its scope.

CYBER AUDIT Cyber security is an attempt to minimizing any risk of financial loss, disruption or damage to the reputation of an organization that may arises from the failure of its information technology systems. The objective of the cyber audit is to provide an assessment of the operating effectiveness of cyber security policies and procedures, identify, protect, detect, respond and recover processes and activities to the board. The Cyber audit program generally covers sub-processes such as asset management, awareness training, data security, resource planning, recover planning and communications, in order to identify internal control and regulatory deficiencies that could put the organization at risk. The security and control issues which deals under cyber security audits includes- Protection of sensitive data and intellectual property Protection of networks to which multiple information resource are connected Responsibility and accountability for the device and information contained in it Scope of a cyber-security audit includes Data security policies relating to the network, database and application in place. Data loss prevention measures deployed. Effective network access controls implanted. Detection/prevention systems deployed. Security controls established (physical and logical). Incident response program implemented.