Cybersecurity audit can be conducted for any entity. However, the Central Bank of Kuwait (CBK) requires local banks, including all Kuwaiti banks and foreign bank branches authorized by the Central Bank of Kuwait -, to engage an independent third-party firm to audit the cybersecurity controls, in which they express assurance of compliance with the Framework, which is intended to ensure the effectiveness of cybersecurity controls in place.