Cybersecurity threats are escalating, unnerving the boards of directors, managers, investors and other stakeholders of organizations of all sizes—whether public or private. Organizations are under increasing pressure to demonstrate that they are managing threats, and that they have effective processes and controls in place to detect, respond to, mitigate and recover from cybersecurity events.
Cybersecurity yields potential business opportunities for a firm to better serve its clients. As a trusted business advisor, firm practitioners can provide advisory services that help companies spot cybersecurity weaknesses, identify potential risks and offer advice on how to safeguard information and systems. Learn how you can help your clients navigate threats by becoming a trusted business advisor for their organization’s cybersecurity risk management programs.
Upon completing the learning, you will be awarded with a certificate in the form of a digital badge to be proudly displayed anywhere on the internet—a personal blog, a social network like LinkedIn, Facebook, Twitter, Mozilla Open Badges, a biographical page on a company website, or an online resume.
Learning for Trust Services Criteria and Description Criteria
The content within these certificate programs reference the trust services criteria and description criteria. If you need guidance and examples, then consider purchasing Walkthrough of the Trust Services Criteria and Walkthrough of the Description Criteria.
Exploring Cybersecurity Toolkit
This toolkit, developed by PCPS, provides learning resources and staff training tools which can assist firms in assessing their own cybersecurity position, as well as that of their clients. Together, these tools will provide insight on your firm’s cybersecurity strengths and opportunities for improvement, in addition to helping your firm analyze your service opportunities with clients. Learn more.
Practitioners who are interested in providing cybersecurity advisory services and want to build their competencies in and understanding of these types of services. Likely participants may already have SOC for service organizations practices and are looking to expand into cybersecurity. Participants must have either IT expertise or access to IT professionals who possess the skills to perform this work.
CPAs in public accounting firms who are providing non-consulting and advisory services for clients of the firms (e.g. tax or A&A services) and need to be able to intelligently convey the value of a cybersecurity risk management program to their clients (to then hand off to the cybersecurity specialist within the firm).
Management accountants and internal auditors who want to understand the types of services available to their organizations related to the management of cybersecurity risks