Cybersecurity Audit School: Audit Evidence and Reporting
Practical skills in collecting and organizing cybersecurity evidence and NIST reporting requirements
Created by Ron Woerner, Sophie Goodwin, Hernan Murdock
Explore how to collect and organize cybersecurity evidence and meet NIST reporting requirements. You'll learn to prioritize risks and communicate findings to influence security decisions. Each section builds practical skills for real-world audit responsibilities.
ACI | Aug 2026 | 65 min
What You Will Learn
You will start by exploring evidence collection and organization, then move into understanding NIST reporting requirements. Step-by-step guidance and practical examples help you connect each topic to real audit scenarios. You'll practice applying these concepts to make informed decisions and improve communication.
Key Features
- Learn to collect and organize cybersecurity evidence for audits and investigations
- Analyze NIST reporting requirements to ensure compliance and clear documentation
- Develop strategies to prioritize risks and communicate findings that drive decisions
Target Audience
Ideal for cybersecurity auditors, IT auditors, and security professionals with some experience in the field. If you want to strengthen your skills in evidence collection, reporting, and risk prioritization, this course will help you apply best practices and support your organization's security goals.
Related courses
