Skip to content
GovernanceInternational

IIA Cybersecurity Topical Requirement (2025)

What is IIA Cybersecurity Topical Requirement (2025)?

The IIA's mandatory minimum for internal audit engagements that cover cybersecurity: what auditors must assess across the governance, risk management and controls for cybersecurity, effective 5 February 2026 under the Global Internal Audit Standards. It comprises 27 controls organised across 3 domains, and applies in International.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where IIA Cybersecurity Topical Requirement (2025) overlaps with the standards you already hold

What IIA Cybersecurity Topical Requirement (2025) means in your sector

What IIA Cybersecurity Topical Requirement (2025) means for your job

Questions people ask about IIA Cybersecurity Topical Requirement (2025)

What is IIA Cybersecurity Topical Requirement (2025)?
The IIA's mandatory minimum for internal audit engagements that cover cybersecurity: what auditors must assess across the governance, risk management and controls for cybersecurity, effective 5 February 2026 under the Global Internal Audit Standards.
How many controls does IIA Cybersecurity Topical Requirement (2025) have?
IIA Cybersecurity Topical Requirement (2025) contains 27 controls organized across 3 domains.
Where does IIA Cybersecurity Topical Requirement (2025) apply?
IIA Cybersecurity Topical Requirement (2025) applies in International. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of IIA Cybersecurity Topical Requirement (2025) is covered here?
This page covers Cybersecurity Topical Requirement, issued February 2025, effective 5 February 2026.

Query IIA Cybersecurity Topical Requirement (2025) programmatically

IIA Cybersecurity Topical Requirement (2025), its 27 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

IIA Cybersecurity Topical Requirement (2025) API reference and MCP config →

How ready are you for IIA Cybersecurity Topical Requirement (2025)?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .