Auditors’ responsibilities related to cybersecurity risks

Cyber-attacks can sometimes penetrate financial reporting systems and compromise internal control to the point where the risk of material misstatement of the financial statements increases. Auditors may be uncertain about their responsibilities for evaluating cybersecurity risk and related controls in an audit of financial statements. Auditors’ questions about how cybersecurity considerations factor into an audit are growing as the threat of cyber-attacks continues to grow. While cyber-attacks against large public companies often capture the most notoriety, cybercriminals typically target small-