In a cyber-attack on a large IT company named Think Safe Co, all IT devices including computers, laptops, smartphones, tablets and internet network etc., were hacked and all the crucial information was accessed by hackin

The Think Safe Co. should undertake Cyber audit in the given situation. Cyber security is an attempt to minimizing any risk of financial loss, disruption or damage to the reputation of an organization that may arises from the failure of its information technology systems. The objective of the cyber audit is to provide an assessment of the operating effectiveness of cyber security policies and procedures, identify, protect, detect, respond and recover processes and activities to the board. Scope of a cyber security audit includes: Data security policies relating to the network, database and applications in place. Data loss prevention measures deployed Effective network access controls implemented Detection/prevention systems deployed Security controls established (physical and logical) Incident response programs implemented