IT SECURITY AUDIT

Information Technology security has received a significant business focus in 2001. This was not difficult to predict given increases in electronic business as well as the increased use of IT systems in business. As a consequence, information security has become the enabler of many new electronic business possibilities as well as an essential business risk management area.

This occurrence necessitates the formulation of proper information security strategies consisting of people, process and technology that will support the business objectives. In order to succeed in carrying out the action plans flowing from the developed strategies, organisations will rely on the skills and talent available internally and externally to their domain. This fact will place greater emphasis on the attraction and retention of specialised IT security staff.  Retention of these specialised skills will have a significant impact on the cost of employment of these individuals, with the further management burden of ensuring that staff skills stay relevant in a very fast changing environment.

Enterprise information security risk exposure is going to increase with the advent of e-business and client business process integration. Regular testing of the effectiveness of employed technology and people processes will therefore become a more essential management tool, to manage and control information security risk throughout the enterprise. Solutions to cover the exposures will have to be defined by a trusted independent and objective expert, taking into account the technological, people and process issues in a specific environment.

The demand and level of specialisation of your audit resources is likely to have increased as a result of organisational dependence on IT systems. On the contrary, the market availability of the required type of resources has decreased as many organisations are faced with the same demands on IT resources.

While this area of expertise was not included in the request for proposal, we have included it to demonstrate our capabilities in this area.

Outsourcing IT Security >>>