An auditor’s role in cybersecurity is to assess an organization’s information security controls and provide assurance that the controls are effective in protecting the confidentiality, integrity, and availability of the organization’s information assets.