Audit Domains

Audit requirements vary considerably across sectors and regulatory contexts. The institute organises its audit assistance around five domains that reflect the principal areas in which infrastructure and industrial organisations are assessed. Each domain draws on relevant research focus areas and established assessment approaches.

Organisations may seek support in a single domain or across several, and the institute can help to coordinate preparation where audits in different domains overlap.

Audit domains

• Critical infrastructure readiness, covering protection and preparedness of essential assets
• Cybersecurity posture, covering digital and operational technology security
• Supply chain integrity, covering supplier reliability, traceability and dependencies
• Safety compliance, covering adherence to applicable safety requirements
• Operational continuity, covering the ability to sustain and restore critical operations

Support in each domain is designed to help organisations both meet the immediate requirements of the audit and strengthen the underlying arrangements that the audit examines. The sections below describe the focus of each domain in more detail.