.... examining how reasonable assurance can be obtained on the cyber resilience of an organization; assessing where cyber-testing techniques can complement more traditional assurance techniques; and evaluating where cyber-testing techniques could provide audit evidence, including evidence of conformity...