Throwback Thursday: Spoilsport | Computerworld Welcome! Here are the latest Insider stories. True tales of IT life, fresh every weekday. Got a story of useless users, hapless bosses, clueless vendors or adventures in the IT trenches? Tell Sharky! The new auditor on the block. Thank youYour message has been sent.SorryThere was an error emailing this page. Computerworld / IDG "); }); try { $("div.lazyload_blox_ad").lazyLoadAd({ threshold : 0, // You can set threshold on how close to the edge ad should come before it is loaded. Default is 0 (when it is visible). forceLoad : false, // Ad is loaded even if not visible. Default is false. onLoad : false, // Callback function on call ad loading onComplete : false, // Callback function when load is loaded timeout : 1500, // Timeout ad load debug : false, // For debug use : draw colors border depends on load status xray : false // For debug use : display a complete page view with ad placements }) ; } catch (exception){ console.log("error loading lazyload_ad " + exception); } }); This IT security pilot fish knows something about audits — and knows what he expects of auditors.“I have more than 15 years of audit experience in IT,” fish says. “I have written and implemented policy and procedure, and developed incident response plans. I spent the better part of last year making sure that the external auditors could not find any inconsistencies in our control standards.”Then the internal audit director decides to perform an audit of fish’s group — and sends a young auditor who thinks he knows everything IT.After three weeks of research and testing, young auditor presents his results in a meeting with his boss the audit director and fish.Among other findings, young auditor reports: “As a good practice, all company policies and procedures must include a disaster recovery plan ...”Fish’s response: “Please indicate how a policy can contain a disaster recovery plan, and why a policy would need one.” That momentarily slows young auditor down, but then he plows ahead with another shot: IT needs “a schedule for planned reviews and updates, as well as for unscheduled changes or significant changes to the environment.”Fish’s calm response: “So your finding is that IT does not have a schedule of reviews and updates for unscheduled changes in the environment? Please tell me how we are to implement that.” Young auditor’s testy reply: “It is not internal audit’s job to tell you how to correct these findings!”“The audit director left the room red-faced and with smoke coming from the ears,” reports fish.“A battle of wits is so unfair when the opponent is unarmed.”Sharky trusts your wits. Send me your true tales of IT life at Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!. You can also subscribe to the Daily Shark Newsletter and read some great old tales in the Sharkives. Computerworld The Voice of Business Technology Follow us Copyright © 2019 IDG Communications, Inc.Explore the IDG Network descend

weiterlesen: RSS Quelle öffnen