Cybersecurity Audit Overview 

References 
By: Darcy Kempa  

Module 1 | Introduction 

Lesson 1.2: What is a Cybersecurity Audit? 

- Information Systems Audit and Control Association (ISACA) 

http://www.isaca.org/About-ISACA/advocacy/Documents/CyberSecurityAudit_
mis_Eng_1017.pdf 
 
Lesson 1.3: When to Perform a Cybersecurity Audit 
- Information Systems Audit and Control Association (ISACA) 
- Auditing Cyber Security: Evaluating Risk and Auditing Controls, Internal 
Audit, page 8, para 3 

http://www.isaca.org/Knowledge-Center/Research/ResearchDeliverables/Page
s/Auditing-Cyber-Security.aspx 
 

 
Brought to you by:  Develop your team with the ​fastest growing catalog​ in the 
cybersecurity industry. Enterprise-grade workforce development 
management, advanced training features and detailed skill gap and 
 
competency analytics. 
1 
  

 
 
   

Module 2 | Cybersecurity Audit Controls and Frameworks 

Lesson 2.1: Cybersecurity Audit Controls 

- Center for Internet Security 

https://www.cisecurity.org/controls/ 
 
Lesson 2.2 Cybersecurity Audit Frameworks 
- Payment Card Industry Data Security Standard 
https://www.pcisecuritystandards.org/ 
- Center for Internet Security 
https://www.cisecurity.org/controls/ 
- Control Objectives for Information and Related Technology (COBIT) 
https://www.isaca.org/cobit/pages/default.aspx 
- National Institute of Standards and Technology (NIST) 
https://www.nist.gov/ 
- NIST Cybersecurity Framework Version 1.1 
https://www.nist.gov/cyberframework/framework 
- NIST Framework for Improving Critical Infrastructure Cybersecurity 
https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf 
- NIST Risk Management Framework for Information Systems and Organizations 
https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final 
- NIST Baseline Tailor 
https://www.nist.gov/services-resources/software/baseline-tailor 

 
Brought to you by:  Develop your team with the ​fastest growing catalog​ in the 
cybersecurity industry. Enterprise-grade workforce development 
management, advanced training features and detailed skill gap and 
 
competency analytics. 
2