Cyber security policy should be based on business requirements and overall risk assessment, in order to be effective and the auditor plays an important role. In the emerging scenario of digital espionage and cyber warfare, protecting critical cyber infrastructure is increasingly becoming a formidable challenge. Entities in key sectors such…