All Things Internal Audit: Elevating Data Security

In this episode, Terry Ray, a top expert in data security, talks with David Pretrisky, director of Professional Standards at The IIA, about why asking the right questions is key to boosting data security and compliance in organizations. They’ll dive into how internal auditors can strengthen their organization’s security, the hurdles they encounter, and practical strategies for success.

Guests:

Terry Ray, senior vice president, data security GTM, field CTO, and fellow at Imperva
  / terry-ray  

Host:

David Petrisky, director, Professional Standards, The IIA
  / david-petrisky  

Key Points: 

Introduction to Data Security and Compliance (00:00:02 - 00:00:22)
Breaking Down Data Defense (00:00:31 - 00:02:45)
Prioritizing Security Controls (00:02:52 - 00:04:24)
Key Frameworks for Security (00:04:58 - 00:06:22)
Common Vulnerabilities and Breaches (00:06:22 - 00:08:25)
Advice for Internal Auditors (00:08:25 - 00:11:10)
Compliance and Regulatory Frameworks (00:11:15 - 00:14:05)
Internal Auditors’ Role in Security (00:14:05 - 00:17:11)
Final Advice for Internal Auditors (00:17:11 - 00:17:32)

The IIA Related Content:
Interested in this topic? Find more articles and resources to support internal auditors in protecting data here: https://www.theiia.org/en/content/res...

Elevate your internal auditing skills and enroll in The IIA's 2024 Cybersecurity Virtual Conference: https://www.theiia.org/en/events/conf...

Visit The IIA's website or YouTube channel for related topics and more.

Resources Mentioned:
NIST Cybersecurity Framework
https://www.nist.gov/cyberframework
General Data Protection Regulation
https://gdpr.eu/
PCI Data Security Standard 
https://www.pcisecuritystandards.org/

Follow All Things Internal Audit:

https://podcasts.apple.com/us/podcast...
https://open.spotify.com/show/1NB6ExN...