How Internal Audit and InfoSec Can Team Up on CyberSec

Cybersecurity remains a top challenge for any organisation that leverages technology — a reality that encompasses nearly all modern businesses, from startups to enterprises. As a result, exploiting vulnerable organisations has become big business.

Increasingly, risk managers recognise that holistic approaches to cybersecurity are foundational to building cyber-resilient organisations. Effective cyber risk management demands alignment, transparency, and collaboration across the enterprise, particularly between internal audit and information security. More than 80% of respondents to the 2025 Pulse of Internal Audit survey reported that meetings between internal audit and information security are common. The survey also revealed a strong association between the frequency of meetings and the effectiveness of the relationship between the two functions.  

 

Internal Audit and InfoSec leaders from roundtable discussions hosted by the Internal Audit Foundation and AuditBoard in November 2024 further emphasised the positive results of developing strong, collaborative relationships. These frontline leaders described benefits including aligned risk assessments, improved regulatory compliance efforts, combined assurance, and better communication with the board.

 

Download your copy of Natural Allies: Nurturing Cyber Resilient Cultures Through Internal Audit-Information Security Collaboration to learn:

●        Report findings on the effectiveness and benefits of the audit/infosec relationship. 

●        Proven strategies from CAEs and CISOs to enhance the collaboration between internal audit and information security. 

●        Actionable steps to enhance collaboration and the organisation's cyber resilience.