A Comprehensive Cybersecurity Audit Model to Improve Cybersecurity Assurance: The CyberSecurity Audit Model (CSAM)

Sabillon, Regner; Serra-Ruiz, Jordi; Cavaller, Víctor; Cano, J M Jeimy

doi:10.1109/inciscos.2017.20

Cited by 50 publications

(18 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This type of cybersecurity audit is an important initial step in defending a network infrastructure against future intrusion attempts since it allows to detect and correct major security gaps. It can also assist in determining which of the next few tasks security management team should prioritize based on the dangers have been discovered (Sabillon et al, 2017).…”

Section: Correct Information For the Correct Toolmentioning

confidence: 99%

Assuring the Optimum Security Level for Network, Physical and Cloud Infrastructure

Atieh¹

2021

Preprint

View full text Add to dashboard Cite

A robust and secure IT infrastructure ensures reliable security, high speeds and connectivity, employee support and accessibility, and a positive user experience for clients. It is hard to manage a modern firm without a secure and adaptable IT infrastructure. Technology, when properly set up and networked, can improve back-office processes, increase efficiency, and simplify communication. This research explores how an organization assure the optimum level of infrastructure security in in three domains: network infrastructure security, physical infrastructure security, and cloud infrastructure security. Running a network infrastructure model comes with a variety of difficulties. The findings suggest that there are few recommendations for assuring right security level for the network infrastructure, including: conducting a network security assessment, keeping user access privileges to a bare minimum for work, updating programs, investigating cybersecurity tools and Increasing cyber-awareness. Physical infrastructure security is also crucial. We divided he dangers are divided into the following categories and suggested for appropriated measure: threats by environment, threats by technical infrastructure, threats by humans, inappropriate humidity and temperature, Electrification, Electromagnetic Interference (EMI), Unauthorized physical access. Cloud security is necessitated by the widespread adoption of cloud technology, as well as an ever-increasing volume and sophistication of cyber attacks. To ensure the right level of cloud security, this research recommend to take some measures, including: Transit and Rest Protection, Asset Security. Securing User Management, Integration of compliance and security, Authentication and Identity, and Operational Safety and Security While no amount of security will ever stop all attacks, organizations can significantly minimize risk of suffering a breach and the fallout from such attacks by taking a few critical steps to secure business’ network, physical and cloud infrastructure.

show abstract

Section: Correct Information For the Correct Toolmentioning

confidence: 99%

Assuring the Optimum Security Level for Network, Physical and Cloud Infrastructure

Atieh¹

2021

Preprint

View full text Add to dashboard Cite

show abstract

“…Sabillon [9] reviews the best practices and methodologies in cybersecurity assurance and audit and presents the Cyber Security Audit Model (CSAM) for use by organizations and nation-states to validate audit, preventative, forensic and detective controls. CSAM comprises 18 domains, with one limited to nation-states and the remaining 17 applicable to organisations in general.…”

Section: Related Workmentioning

confidence: 99%

A NIS Directive Compliant Cybersecurity Maturity Assessment Framework

Drivas

Chatzopoulou²,

Μαγλαράς

et al. 2020

2020 IEEE 44th Annual Computers, Software, and Applications Conference (COMPSAC)

View full text Add to dashboard Cite

The EU NIS Directive introduces obligations related to the security of the network and information systems for Operators of Essential Services and for Digital Service Providers. Moreover, National Competent Authorities for cybersecurity are required to assess compliance with these obligations. This paper describes a novel Cybersecurity Maturity Assessment Framework (CMAF) that is tailored to the NIS Directive requirements. CMAF can be used either as a self-assessment tool from Operators of Essential Services and Digital Service Providers or as an audit tool from the National Competent Authorities for cybersecurity.

show abstract

“…Turker (2018) explains the developments and studies on shaping the global accounting profession to meet the expectations of the global business world according to the digital world. Sabillon, R et al (2017) examined the best practices and methodologies of global leaders in the cybersecurity assurance and audit arena. The article presents an original and comprehensive cybersecurity audit model as a proposal to be utilized for conducting cybersecurity audits in organizations and Nation States.…”

Section: Literature Reviewmentioning

confidence: 99%

The impact of digitalization on the audit profession: a review of Turkish independent audit firms

Adiloğlu¹,

Güngör²

2019

Pressacademia

View full text Add to dashboard Cite

Purpose -The aim of exploratory study is to increase the understanding of the effects digitalization has on the tools and working methods of the audit profession. Methodology -Websites of 235 audit firms authorized by POA (Public Oversight, Accounting and Auditing Standards Authority) were examined. In addition, transparency reports of 64 companies authorized for Public Interest Entity (PIE) Audit were investigated as well. The status of the services provided by the audit companies after the technological developments were analyzed. In addition, infrastructure and continuous education investments of audit firms related to digitalization have been determined. Findings-It has been found that almost all audit companies provide services for independent audit and tax audit. (Respectively 95% and 85%). These are followed by financial services and internal audit issues. (Respectively 61% and 45%). Only Big Four invest the necessary infrastructure and human resources in addition to providing services in these matters. In spite of all these technological developments, only 24 companies provide education to their employees for IT / IT audits. Only Big Four provide education for digital technologies to their employees. Conclusion-As a result, with the effect of digitalization, Information technologies have gained importance. But the audit firms have not yet made the necessary investment in these areas. 90% of audit firms do not provide services in these areas and do not make infrastructure and human resources investments.

show abstract

A Comprehensive Cybersecurity Audit Model to Improve Cybersecurity Assurance: The CyberSecurity Audit Model (CSAM)

Cited by 50 publications

References 0 publications

Assuring the Optimum Security Level for Network, Physical and Cloud Infrastructure

Assuring the Optimum Security Level for Network, Physical and Cloud Infrastructure

A NIS Directive Compliant Cybersecurity Maturity Assessment Framework

The impact of digitalization on the audit profession: a review of Turkish independent audit firms

Contact Info

Product

Resources

About