Auditing Information Security - Evaluating the Effectiveness of Your Information Security Program
Without the ability to assess its effectiveness, the best information security program becomes a mere token effort. The purpose of information security auditing is to review whether your information security program achieves the objectives you have set yourself as an organization. Auditing is not about policing or assigning blame, but instead all about identifying weaknesses and opportunities as part of a process of continual improvement.
View Details