Re: We hit half-million: The Cidr Report

[Owen DeLong <owen () delong com>]

On May 1, 2014, at 2:01 AM, John Souter <john () linx net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 30/04/14 17:30, Valdis.Kletnieks () vt edu wrote:
> > ...
> > Anybody got recommendations on how to make sure the company you engage
> > for the audit ends up sending you critters that actually have a clue? (Not
> > necessarily PCI, but in general)
>
> If more auditors (of whatever type) were put in the street when they
> annoy their customer or act irrationally, the world might become a
> better place.

The problem with this theory is that if auditors can be so easily put to the
street, you run into the risk of auditors altering behavior to increase customer
satisfaction in ways that prevent them from providing the controls that are the
reason auditors exist in the first place.

If you don’t believe me, examine the history of Arthur Anderson and their
relationship with a certain Houston-based company which failed spectacularly.

Owen