© Raymond Pompon 2016

Raymond Pompon, IT Security Risk Control Management, 10.1007/978-1-4842-2140-2_1

1. Why Audit?

Raymond Pompon

(1)Seattle, Washington, USA

A smooth sea never made a skilled sailor.

—Franklin D. Roosevelt

As the headlines fill with breach notifications and stolen identities, legislators and industry groups may add more security regulations to their lists that entail newer and tougher audits. If someone hasn’t audited your organization yet, someone eventually will. As our dependency on IT systems grows, there will be more scrutiny. This means more rules, regulations, and contractual obligations regarding the security and resiliency of crucial IT systems. These new rules will come with audits to make sure that they are being followed. ...

Get IT Security Risk Control Management: An Audit Preparation Plan now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.