top of page

Principle 5

RISK-BASED STRATEGY AND EXECUTION

Audit Against Risk Thresholds

< Back To Framework

The audit function should review and assess proper execution of the cyber risk treatment plan based on the acceptable risk thresholds.

2020 IIA Three Lines Model Principle 4

2017 AICPA CRMP Description Criteria

bottom of page