Fundamentals of Information Systems Security, 4th Edition

Post-Audit Activities

After completing the audit activities, the auditors still have more work to do. Such tasks include exit interviews, data analysis, generation of the audit report, and a presentation of findings to management.

Exit Interview

Auditors perform an exit interview with key personnel to alert them to major issues and recommendations that will come later in the audit report. This enables management to respond quickly and act on serious issues. Aside from these early alerts, auditors should not provide details before the final report. If they do, they might give a false view of the organization’s security preparedness.

5.2 Data Analysis

Auditors commonly analyze data they collect away from the organizational site, when such data ...