Skip Ribbon Commands
Skip to main content
Global Institute of Internal AuditorsBreadcrumb SeparatorStandards and GuidanceBreadcrumb SeparatorRecommended GuidanceBreadcrumb SeparatorPractice GuidesBreadcrumb SeparatorGTAG: Assessing Cybersecurity Risk: The Three Lines Model

Global Technology Audit Guide (GTAG): Assessing Cybersecurity Risk: The Three Lines Model

Global Technology Audit Guide (GTAG): Assessing Cybersecurity Risk: Roles of the Three Lines of DefenseIdentifying, Assessing, and Mitigating Cyber Threats

Organizations of all types are becoming more vulnerable to cyber threats due to their increasing reliance on computers, networks, programs and applications, social media, and data. In response to such emerging risks, CAEs are challenged to ensure management has implemented both preventive and detective controls. CAEs must also create a clear internal audit approach to assess cybersecurity risk and management’s response capabilities, with a focus on shortening response time.

The IIA’s newest Global Technology Audit Guide (GTAG), Assessing Cybersecurity Risk: The Three Lines Model, was designed to help internal auditors develop competence in providing assurance over cybersecurity risks.

Assessing Cybersecurity Risk: The Three Lines Model discusses the internal audit activity’s role in cybersecurity; explores emerging risks and common threats; and presents a straightforward approach to assessing cybersecurity risks and controls.

Downloads and Links

English Chinese (Traditional) French Korean
Russian Spanish Thai

Non-members may purchase this GTAG from the IIA Bookstore.​