LMP Ltd. asks you as a Company Secretary to suggest an audit and explain objectives as well as its dimensions of the process in order to protect the sensitive data and intellectual property and also protection of network

Cyber security is an attempt to minimising any risk of financial loss, disruption or damage to the reputation of an organisation that may arise from the failure of its information technology systems. The objective of the cyber audit is to provide an assessment of the operating effectiveness of cyber security policies and procedures, identify, protect, detect, respond and recover processes and activities to the board. The Cyber audit program generally covers sub-processes such as asset management, awareness training, data security, resource planning, recovery planning and communications, in order to identify internal control and regulatory deficiencies that could put the organization at risk. Dimension of Cyber Security Audit Process are as under: Management: Management of the Company ultimately owns the risk of the decisions made for the organization. Therefore, it has a vested interest in ensuring that cyber security controls exist and are operating effectively. Decisions are typically made based on guidance received from the risk management processes, for taking appropriate decisions. Risk Management: Risk assessments are typically made based on guidance from the Cyber Security Officer at an organization and enterprise management to make decisions, employing risk management processes. The objective in any risk assessment is twofold. First, it is critical to communicate the state of the risk so that it is easy to understand and be clear on the level of risk involved. Secondly and significantly the ways in which to address that risk must be identified as well. This provides both problem and solution, and mitigates the negative impact of that risk to an enterprise. It is important to have defined processes, trained and competent cyber security resources, and a governance framework to ensure that appropriate actions are carried out by enterprise leadership and managed effectively to address current and emerging cyber security threats. Internal Audit: Internal auditors and risk management professionals have key roles to play, as does enterprise management. Cyber Auditing is a security measure not an inconvenience. It is critical to protecting an enterprise in today's global digital economy. The internal audit department plays a vital role in cyber security auditing in many organizations, and often has a dotted-line reporting relationship to the audit committee to ensure that an independent view is communicated at the board level of the enterprise.