AICPA unveils cybersecurity risk management reporting framework.

Organizations large and small are facing cybersecurity attacks, so it's more important than ever for them to show stakeholders what they are doing to best protect themselves. To help, the AICPA has developed a Cybersecurity Risk Management Reporting Framework that will enable organizations to take a proactive approach to cybersecurity risk management and communicate those activities to stakeholders.

Three resources that support reporting under the framework include: Description criteria: For use by management in explaining its cybersecurity risk management program in a consistent manner and for use by CPAs to report on management's...