Auditing the IT Security Function: An Effective Framework

Introduction
As businesses have come to depend very much on their information systems in the last half a century, the importance of having those systems in a fit state to run has become paramount. Not only is good, reliable Electronic Data Processing vital but an increasingly important part of the equation involves the IT Security Function. Without secure information systems a company is vulnerable to exploits from outside as well as within. In recognition of this, ways of measuring and monitoring the effectiveness of security controls and systems have been developed into internationally r…