Comment by stackskipton

Not really. As long as current system where auditors are also clients of company being audited, the conflict of interest is too high.

Also, not to mention in many countries, the cost of getting breached is nothing so many companies are willing to just hope for the best and payout in case of the worst.