Monday, October 18, 2010

Bridging the Gap: How Internal Audit and IT Can Work Together To Improve Information Security


Internal auditors and information security professionals don't always get along, and it's not really all that difficult to figure out why.

"They just have different cultures and different backgrounds," W. P. Carey Professor of information systems Paul Steinbart explains. "I mean, when you think about it, most information security people have a computer science-type background with very little business focus. Meanwhile, on the internal auditing side, it's all about accounting and business with maybe just a smattering of IT."

See full Article.