The role and importance of IT auditing
The first time I encountered an IT auditor… well, let’s say that I did not fully appreciate or embrace the value of their visit. I had spent several months personally configuring routers, switches, and servers to the exact specifications provided by the information systems security manager. Who was this outsider showing up to tell me how to manage my network or point out what I did was wrong? How can they come in here and judge what I do?
As you can see, at that point in my career, I didn’t fully understand the role of an IT auditor. Initially, I thought that all an IT auditor did was come in with a checklist, confirm that a setting in the operating system (OS) or router was done according to the standard, and then leave. You will soon see that I was far from accurate in my understanding!
At its heart, IT auditing is about scrutinizing and ensuring that an organization’s technology infrastructure – including...