GTAG: Auditing Cybersecurity Operations: Prevention and Detection

The internal audit activity adds value when it provides such services in conformance with the Standards and with references to widely accepted control frameworks, particularly those used by the organization’s IT and IS functions.