Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

Board Responsibility

‰ 3UHSDUHGQHVV IRU GDWD UHODWHG LVVXHV ‰ &RVW RI LQFLGHQWV ƒ %XVLQHVV GLVUXSWLRQ ƒ /RVV RI FXVWRPHU WUXVW

‰ 1HHGV WR HIIHFWLYHO\ PDQDJH WKHVH VLWXDWLRQV ‰ +DFNHUV DUHQ¶W UHVSRQVLEOH IRU HYHU\WKLQJ ƒ DFFLGHQWDO PDMRU V\VWHPV RXWDJHV ƒ ORVV RI VHQVLWLYH GDWD E\ DQ HPSOR\HH ‰

%XVLQHVV OHDGHUV IHHO IXOO\ SUHSDUHG IRU DQ LQFLGHQW

6RXUFH (FRQRPLVW ,QWHOOLJHQFH 8QLW 6XUYH\

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

Role of Internal Audit in Cyber Security

2UJDQL]DWLRQDO /LQHV RI 'HIHQVH

'DLO\ RSHUDWLRQDO GHFLVLRQV PDGH EDVHG RQ ULVN LQIRUPDWLRQ 8QGHUVWDQG DFFHSWDEOH ULVN OHYHOV HVFDODWH ZKHUH QHFHVVDU\ 5LVN 0LWLJDWLRQ ,PSOHPHQW *RYHUQDQFH 5LVN WUDFNLQJ PRQLWRULQJ HWF 5LVN RYHUVLJKW ,QGHSHQGHQW DVVHVVPHQW RI SURJUDP HIIHFWLYHQHVV %RDUG UHSRUWLQJ $XGLW IRU FRPSOLDQFH DQG HQVXUH GLVFORVXUH REOLJDWLRQV DUH PHW UHODWHG WR F\EHU ULVNV

%XVLQHVV ,7 )XQFWLRQV

5LVN 0DQDJHPHQW )XQFWLRQ

,QWHUQDO $XGLW

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ