In this session, we will discuss the intent of the NIST Cybersecurity Control Framework (NIST CSF) and how the framework is the most comprehensive to follow to comply with all regulatory requirements. We will discuss the importance of performing annual cybersecurity Risk Assessments and Gap Analysis to identify weaknesses, and how internal audit can also support organizations in the cybersecurity fight against “bad actors”. We will also discuss how the CIS18 best practice cybersecurity controls map to the NIST CSF and how internal audit can incorporate some of those controls into annual audit testing to provide value and ensure the organization is addressing and mitigating cybersecurity risks. Join us to learn why organizations should not rely solely on their Information Technology department to determine the best path to cybersecurity and why cybersecurity insurance is not the silver bullet when combating threat actors. Overall, we will discuss how creating a culture of cybersecurity is the best method to protect organizations from threats and mitigate technology and non-technology risks.