Maximizing the ROI of a security audit
Ross Westcott · Network Security · 2007
Audits generally cause IT security managers to pause and wonder if their house is in order enough to survive the effort. Having someone look over your work may be nerve-wracking, but it is unarguably constructive, and information security managers are learning to anticipate rather than fear this event. It is an opportunity to highlight what is being done correctly, and to identify areas that need improvement.