CHAPTER 5: ACTIVITIES

Feeling the elephant

The story of the blind men and the elephant has various tellings. In one version, blind men of the capital were asked by a king what an elephant looked like. The one who felt its trunk thought it was a tree branch; the one who felt its tail believed it to be a rope; the one who felt its ear said it was a fan. Their disagreement came to blows.

In covering the various control elements – People, Data, Objectives and Systems – thus far, what we’ve accomplished so far is not unlike grasping a different part of the elephant each time. This brings up the pivotal question – what is a control activity? What does the elephant look like?

Just as an elephant is more than the sum of its parts, the answer may not ...

Get Compliance by Design: IT Controls that Work now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.