In addition, regulators could require large companies to undergo an annual information-security audit by an accredited third party, similar to financialaudits for listed companies.
This will be a multi-post effort and will include posts on cash flow, profit and loss, balance sheets, GAAP accounting, audits, and financial statement analysis.