Audit Risks

Posted February 21st, 2008 by

Yes, audit risks are real risks, they’re just risks to the individuals building the controls.  This might or might not coincide with the risks to the data, IT system, or the business mission.

Takes me back to the question Curphey asked years ago:  Do you think people care about compliance, or do they care more about not being caught out of compliance?  It’s a very simple question, but I keep circling around to it from different angles.



Similar Posts:

Posted in Rants | 1 Comment »

One Response

  1.  shrdlu Says:
    February 21st, 2008 at 5:42 pm

    You might ask them: Would you rather be in compliance or be following best practices?

Leave a Comment

Please note: Comment moderation is enabled and may delay your comment. There is no need to resubmit your comment.


Visitor Geolocationing Widget: