CHAPTER 5: ACTIVITIES
Feeling the elephant
The story of the blind men and the elephant has various tellings. In one version, blind men of the capital were asked by a king what an elephant looked like. The one who felt its trunk thought it was a tree branch; the one who felt its tail believed it to be a rope; the one who felt its ear said it was a fan. Their disagreement came to blows.
In covering the various control elements – People, Data, Objectives and Systems – thus far, what we’ve accomplished so far is not unlike grasping a different part of the elephant each time. This brings up the pivotal question – what is a control activity? What does the elephant look like?
Just as an elephant is more than the sum of its parts, the answer may not ...
Get Compliance by Design: IT Controls that Work now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
