The Institute of Internal Auditors released the first in a series of topical requirements planned for this year, starting with cybersecurity.