The American Institute of CPAs (AICPA), has released a risk management reporting framework intended to "establish a common, underlying language for Cybersecurity risk management reporting — almost akin to US GAAP or IFRS for financial reporting. "According to AICPA, the framework may be used by both management and CPAs to "enhance cybersecurity risk management reporting of an organization's cybersecurity efforts."
Please see full publication below for more information.
