Podcasts · All Things Internal Audit
Ransomware Readiness and the Role of Internal Audit
· 22 min · S3 E80
Episode Ransomware Readiness and the Role of Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit Tech
In this episode, Adam Ross speaks with Vipul Patel about how organizations can better prepare for ransomware attacks. They talk through what goes wrong in the first hours of an attack, what smart preparation looks like, and where traditional audit approaches fall short when a business is in crisis mode.
• HOST:
• Adam Ross, CIA, CISA Partner and Internal Audit Services Leader, Grant Thornton
• GUEST:
• Vipul Patel, CISA Audit and Assurance Managing Director, IT Internal Audit Leader, Deloitte & Touche LLP
KEY POINTS:
• Introduction [00:00:02-00:00:27] • Common Mistakes in Ransomware Response [00:00:27-00:02:14] • Building Crisis Communication Plans [00:02:20-00:03:03] • A Simple Incident Response Runbook [00:03:03-00:05:03] • Internal Audit's Role Before an Incident [00:05:03-00:07:05] • Stress Testing and "What If" Scenarios [00:07:05-00:08:01] • Tabletop Exercises and Cross-Functional Readiness [00:08:02-00:10:03] • Partnering With the CISO and Management [00:10:03-00:11:15] • Lessons Learned After Ransomware Incidents [00:11:15-00:14:05] • Governance Changes After an Attack [00:14:55-00:16:55] • Cyber Risk as a Business Issue [00:16:55-00:17:16] • Traits of Organizations That Respond Well [00:17:20-00:19:44] • Final Advice for Internal Auditors [00:19:44-00:20:56]
Visit The IIA's website or YouTube channel for related topics and more.
IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources:
• Global Internal Audit Standards • Cybersecurity Topical Requirement • Course: Detecting, Mitigating and Responding to Global Ransomware Attacks • Articles: A Ransomware Playbook • IIA Certificates: IT General Controls Certificate • Knowledge Centers: Artificial Intelligence • Vison 2035 • IIA Courses: Fundamentals of IT Auditing • Become a Certified Internal Auditor (CIA) • CIA Challenge Exam
Follow All Things Internal Audit:
• Apple Podcasts • Spotify • Libsyn • Deezer
Links in the notes 18
- https://www.linkedin.com/in/adam-ross-29488a4/
- https://www.linkedin.com/in/vipul-patel-2287a81/
- https://www.theiia.org/en/
- https://www.youtube.com/%40IIAGlobalHQ
- https://www.theiia.org/en/standards/2024-standards/global-internal-audit-standards/?utm_source=google&utm_medium=cpc&utm_campaign=22100717904&utm_content=174821656482&utm_term=iia%20audit%20standards&gad_source=1&gad_campaignid=22100717904&gbraid=0AAAAADsnbmzrccWUNrcaezU3tqZKeGyb4&gclid=Cj0KCQjwucDBBhDxARIsANqFdr08xknZvGDSPOIRLC41f9Hk7-ycG2NaEy9tMs13xnjcEE9I-PeaowYaAkv0EALw_wcB
- https://www.theiia.org/en/standards/2024-standards/topical-requirements/cybersecurity/
- https://www.theiia.org/en/products/learning-solutions/course/detecting-mitigating-and-responding-to-global-ransomware-attacks/
- https://internalauditor.theiia.org/en/articles/2024/december/a-ransomware-playbook/?_gl=1*rgy3u*_gcl_aw*R0NMLjE3NzUyNDU5MzAuQ2owS0NRand5cjNPQmhEMEFSSXNBTGxvLU9tT0ZEWUQyWkNvTGd5M1BSbnl6WkREZGRDV0phQnB3UXFGWXowWC05VlI1MGl5bGVrckh1c2FBbU4xRUFMd193Y0I.*_gcl_au*MjEyNjUzNTM0OC4xNzczMDc4OTc3LjE1MTE0MTg3NTIuMTc3NDI5MjczNy4xNzc0MjkyNzM3
- https://www.theiia.org/en/learning/certificates/
- https://www.theiia.org/en/resources/knowledge-centers/artificial-intelligence/
- https://ia-vision2035.org/
- https://www.theiia.org/en/products/learning-solutions/course/fundamentals-of-it-auditing/
- https://www.theiia.org/en/certifications/cia/
- https://www.theiia.org/en/certifications/cia/challenge-exam
- https://podcasts.apple.com/us/podcast/all-things-internal-audit/id1649563473
- https://open.spotify.com/show/1NB6ExNTE5RaarkTRaPBcy
- https://1984d534-f92f-4772-a722-6ac47400e67e.libsyn.com/
- https://www.deezer.com/us/show/5250577
Transcript
Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.