Copyright © 2017 by

American Institute of Certified Public Accountants, Inc.New York, NY 10036-8775

All rights reserved. For information about the procedure for requesting permission to make copies of any part of this work, please e-mail copyright@aicpa.org with your request. Otherwise, requests should be written and mailed to the Permissions Department, AICPA, 220 Leigh Farm Road, Durham, NC 27707-8110.

1 2 3 4 5 6 7 8 9 0 AAP 1 9 8 7

ISBN 978-1-94354-672-5

Get Guide: Reporting on an Entity's Cybersecurity Risk Management Program and Controls now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.