Auditing IT Infrastructures for Compliance, 3rd Edition

The Importance of Using Standards in Compliance Auditing

There is no shortage of frameworks and standards for IT departments and auditors to rely on. There are many different standards from varying organizations, each with its own strengths and weaknesses. However, they all have the same common goal of establishing prudent and good practices around IT control. Many organizations find that they need to use a blend of standards to accomplish their goals. Auditors tend to focus or specialize on particular standards, yet many organizations may seek an audit or assessment against a particular standard. Many organizations, in the beginning, look to their peers and to auditors for what framework and standards they should be using. It is important, ...