Conference Description
Key Takeaways
- One-day virtual conference for internal auditors seeking to strengthen cyber risk oversight capabilities
- Covers cyber governance, AI controls (including Microsoft Copilot), data privacy and organizational resilience
- Focuses on translating cyber risk into business terms for stakeholders and decision makers
- Offers 7.2 CPE credits with 15 days of playback access
About the Event
The 2026 Cybersecurity Virtual Conference, hosted by The Institute of Internal Auditors (IIA), brings together internal audit professionals and cybersecurity practitioners for a focused examination of cyber risk assurance. The virtual format provides online access with 15 days of playback, allowing participants to revisit practitioner-led sessions and expert presentations.
Cyber Governance and AI Controls
The conference addresses the expanding scope of internal audit in providing assurance over cyber governance, with particular attention to AI-related risks and controls. Sessions examine the governance challenges posed by tools such as Microsoft Copilot, helping auditors understand how to evaluate controls around emerging AI technologies. The program emphasizes viewing cyber risk through an enterprise lens rather than treating it as a purely technical concern.
Bridging Technical and Business Perspectives
A central theme is cyber risk quantification and communication. The event addresses the challenge of making cyber risk meaningful to business decision makers, helping audit professionals frame technical findings in terms that resonate with executives and boards. This includes approaches to evaluating governance structures and controls while delivering actionable insights to stakeholders.
Who Should Attend
The conference serves internal and IT auditors assessing cybersecurity, cloud environments, data privacy and access controls. Chief Audit Executives, audit leaders, compliance officers and risk managers will find relevant content, as will cybersecurity professionals who work alongside internal audit functions. Prior cybersecurity expertise is not required.