In response to growing market demand from customers, vendors, business partners and regulators for useful information about an entity’s cybersecurity risk management efforts, the AICPA has expanded the options available for organizations to voluntarily report to external parties about the effectiveness of their cybersecurity risk management programs.

EXPLORE>