Cyber Security Auditing, Assurance, and Awareness Through CSAM and CATRAM

Cybersecurity auditing is more than a check of technical controls: it also involves how organizations prepare, respond, and build awareness among the people who use their systems. Regner Sabillon’s research-led book brings those concerns together, with particular attention to two models—the CyberSecurity Audit Model (CSAM) and the Cybersecurity Awareness Training Model (CATRAM).

From cyber incidents to organizational assurance

The opening chapters set the wider context, covering cybercrime and cybercriminals, cybersecurity incident response and management, digital forensics and evidence, electronic discovery, national cybersecurity strategies, and cyber warfare. This broad foundation places audit and training within the practical and policy challenges organizations face.

Put the CSAM framework to work

Dedicated chapters explore cybersecurity auditing and the CSAM model. The book describes CSAM as a way to assess cybersecurity across selected domains or through a fuller organizational audit, including evaluation of controls, maturity, and cyber readiness. Its scope also addresses assessment of national cybersecurity strategies.

Make awareness training more deliberate

The final chapter focuses on CATRAM, a model for developing or reviewing organizational cybersecurity awareness training. Its intended groups include board members, executives, managers, IT staff, and end users—recognizing that security awareness is not solely an IT responsibility.

A structured reference for security practice

By connecting audits, incident management, forensic evidence, strategy, and personnel training, Sabillon presents cybersecurity as an organizational discipline with both technical and human dimensions. The material will be especially relevant to cybersecurity auditors, security professionals, policymakers, researchers, educators, and students looking for a structured account of assurance and awareness models.