Auditing the IT Security Function: An Effective Framework

Introduction As businesses have come to depend very much on their information systems in the last half a century, the importance of having those systems in a fit state to run has become paramount. Not only is good, reliable Electronic Data Processing vital but an increasingly important part of the equation involves the IT Security Function. Without secure information systems a company is vulnerable to exploits from outside as well as within. In recognition of …

…for Selecting Quality Auditors 2004, Canada. Available electronically from http://www.praxiom.com/iso-10011-2.htm, Accessed August 16, 2004. Public Service Staff Relations Board (2001), Security Audit Report, Canada. Available electronically from http://www.pssrb-crtfp.gc.ca/reports/secaud_e.pdf, Accessed August 15, 2004. SANS institute (2003), SCORE Checklist Project: ISO 17799, US. Available electronically from http://www.sans.org/score/ISO_17799checklist.php, Accessed August 16, 2004. 17799 Central (2004), Introducing ISO 17799, UK. Available electronically from http://www.17799central.com/iso17799.htm, Accessed August 16, 2004.