IA’s role in establishing an effective cloud security audit program

Event Description 

In recent years, organizations have rapidly migrated core data and critical business applications to the cloud environment. While many have some form of cloud security controls, these are often not holistically defined, leading to limited controls to oversee shared responsibility model, challenges with security controls adoption and, most importantly, secure data in a multi-cloud operating environment. A proactive cloud security internal audit program evaluates risks associated with a well-defined cloud program governance model that oversees shared responsibility model, evaluates Cloud Security Posture Management (CSPM) and considers Data Security Posture Management (DSPM) in a multi-cloud environment. This in turn enables secure business operations with increased agility and reduced costs.

Internal audit can play a pivotal role helping organizations define and mature their cloud security program and provide guidance on how to protect business operations while continuing to move towards a fully integrated operating environment.

Join Grant Thornton’s Internal Audit Cybersecurity team on April 13th to discuss how internal audit leaders can effectively assess their organization’s cloud security program holistically through a cloud security audit program covering Cloud Security Program Governance (CSPG) along with Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM).We’ll provide leading practices and recommendations to mature your organization’s cloud adoption.

The discussion will focus on:

• Current cloud trends, including opportunities and challenges
• Business operational trends and how companies have successfully responded to known and unknown cloud security risks
• Cloud Security Program Governance (CSPG), including key collaboration factors between the cloud vendor and a company's cloud security team
• Cloud operations and infrastructure components by reviewing Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM)
• Testing strategies to help ensure there is a competent program with full coverage to manage cloud and data specific security risks
• Leading practice examples on how to effectively mature cloud programs