A Synergistic Approach to Information Security and Technology Audit

No ratings

Presented at TechnoSecurity&DigitalForensics 2019 by

John Wallace

The disciplines of Information Security and IT Audit are quite different and require different skill sets. However, they have many common goals and objectives. For example, both are tasked with ensuring that their organization’s information assets are properly protected, whether that be PCI data, Intellectual Property, or customer and employee PII. This session will explore what these disciplines have in common, and attendees will learn how practitioners of each discipline can jointly leverage the other’s unique skill sets and techniques. Information Security professionals regularly use security tools with which IT Auditors are often unfamiliar. These security tools can provide data that is very useful when conducting IT Audits. In the process of auditing systems and business applications, IT Auditors create or use tools with which Information Security professionals are often unfamiliar. The data that IT Auditors gather can be quite helpful to Information Security professionals as they protect the organization’s information assets. Information Security and IT Audit professionals each bring unique organizational knowledge and security perspectives that can be useful to each other. Real-world examples of success will be presented, and attendees will explore how they can utilize the unique skill sets and techniques of each discipline. Attendees will leave with an understanding of how, together, Information Security and IT Audit professionals can better achieve their common goals and objectives.