Accessibility

Day 2 of the Critical Sector Auditing and Risk Analysis Workshop

Following the high-level opening conference, the second day of the critical sector auditing and risk analysis workshop for Malaysia focused on understanding different auditing approaches and their uses.

Sessions led by EU CyberNet experts Christian Schlehuber, Ilmar Toom and Nick Small, introduced participants to different auditing approaches in order to understand how structured maturity assessment can help evaluate organisational resilience. Speakers highlighted that good audits improve resilience not only compliance. 

The main take-aways included: 

  • Risk-based cybersecurity auditing must prioritise threats and vulnerabilities based on their likelihood and potential impact. This approach links security evaluations directly to organisational risk tolerance and strategic objectives, enabling decision-makers to allocate resources efficiently. 
  • Compliance-based cybersecurity auditing ensures cybersecurity aspects have been embedded into workflows. This helps to determine the maturity level of compliance. 
  • Technical-based cybersecurity auditing evaluates whether established controls are adequately designed, implemented and applied which helps to ensure coverage. 
  • Inspection and verification approaches facilitate understanding about how effective the cybersecurity measures are. 
  • The final session discussed the importance of follow-up activities after auditing such as developing plan to drive improvement and control auditing, but also understanding the value of collaborative reviews to identify opportunities for improving the auditing process itself.  

Links 



Keep reading similar articles
EU CyberNet Supports Youth Involvement in Cybersecurity in Fiji

EU CyberNet organised a capture-the-flag (CTF) exercise this week in Fiji to introduce cybersecurity to youth as part of its contribution to the Fiji National Cybersecurity and Resilience Convention as well as engaged in sessions on youth employment and online safety.

From Risk to Resilience: Pacific Island Countries to Strengthen Critical Infrastructure

EU CyberNet co-organised a workshop this week in Canberra, Australia bringing together six Pacific Island Countries to strengthen the resilience of critical infrastructure against the combined effects of climate change, cyber threats and emerging technologies.

Save the Date: EU CyberNet Winter School 2027 to Take Place in January in Portugal

EU CyberNet Winter School 2027 will take place from 27 to 29 January in Tomar, Portugal. The 2nd edition, titled “Governing Agentic AI: From Oversight to Operational Resilience”, focuses on how organisations can adopt artificial intelligence (AI) and agentic systems while ensuring the continuous delivery of services during disruptions in AI systems.

Strengthening Cyber and Climate Resilience in the Pacific Region

EU CyberNet, in partnership with the Czech National Cyber and Information Security Agency (NUKIB), the Delegation of the European Union to Australia and the embassies of Estonia and the Czech Republic to Canberra, is organising a workshop this week in Canberra, Australia, bringing together six Pacific Island Countries to strengthen cybersecurity and climate resilience of critical infrastructure.

EU CyberNet Expert Podcast Series: Episode #2 is Released

EU CyberNet has released Episode #2 in its Expert Podcast Series. The episode titled “If AI Fails Tomorrow, Can Your Public Services Still Run?” discusses the Institutional AI Dependency Test that is an evidence-led governance exercise for cyber resilience. The episode features Andra T. Alcalá and is hosted by LAC4 Partnerships and Technical Engagement Manager Leonardo Ortega.

EU CyberNet Crash Course #4: OSINT in the Age of AI

The 4th EU CyberNet Crash Course, titled “OSINT in the Age of AI” and led by EU CyberNet instructor Ago Ambur explored how open-source intelligence (OSINT) is changing through artificial intelligence (AI).