Re: Shared Security/Audit Position

[Gary Dobbins <dobbins () ND EDU>]

Who authors policies and standards might come into play.  It would be a
conflict of interest for the audit role to author those, so if your
security group does, it might be sticky.

Matthew Dalton wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi!
>
> I was wondering if anyone on the list has had experience with a shared
> position between their internal audit and information security offices.
>  We are investigating this possibility to assist our Audit department.
> We are currently trying to determine what, if any, job responsibilities
> would not become conflicts of interest between the two roles.  Does
> anyone have any experience in this?  Thanks!
>
>
> - --
> Matthew Dalton
> Director of Information Security
> Office of Information Technology
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFHH5JkVKUofGqW+twRAmIlAJ0X/G0YM9gyPniXz+vu4+EbgtfcDgCbBF4y
> hCSiYQcAwjW6wRE691PERwQ=
> =x+nW
> -----END PGP SIGNATURE-----

--

 Gary Dobbins, CISSP -- Director, Information Security
 University of Notre Dame, Office of Information Technologies