Internal Audit Functions in Cyber Security Governance

Abstract

Cyber-attacks have been brought into the critical risk category with rising technology usage and emerging developments in digital transformation that have been dominating service sectors like banking. The assurance of the validity of the activities, which are being coordinated in cyber security governance mechanisms of the banks, is needed to ensure the financial transactions are being driven between acceptable risk levels. The control of risk management operations for cyber security processes should be performed with the support of audit units of the banks. Because of the forementioned reasons, the responsibility fields of internal audit teams in cyber security management processes are deeply examined through the Delphi technique in this chapter, which is derived from the doctoral thesis research study. On this basis, blockchain technology is going to be explored from the point of technical concepts and policy framework to propose a set of solutions for continuous audit methods in cyber security governance.