The Standards, which can be found on the IIAâs global website, include additional focus on areas such as:
-
Board (or equivalent) involvement in IA
-
IA mandate, vision and strategic plan
-
An understanding of risks and coverage throughout the organisation
-
Planning, tracking and measuring performance (e.g., efficiency and quality)
-
IA reporting, evaluating findings and effective communication
There will also be new Topical Requirements and guidance that help IA functions focus on key risk areas. These include topics such as Cybersecurity, Information Technology Governance, Privacy Risk Management, Sustainability and ESG (Environmental, Social & Governance), and Third-party Management.
