CHAPTER 8: REVIEWING SECURITY ASSESSMENT FAILURES AND AUDITOR MANAGEMENT STRATEGIES

The essence of strategy is not to carry out a brilliant plan that proceeds in steps; it is to put yourself in situations where you have more options than the enemy does.’ – Robert Greene

Even if you studied and comprehended everything said in this, and other relevant sources on information security auditing, everything can still go terribly wrong. There are always some inevitable influences of chance, human error, technical fault and sudden environment change. Because of the latter, quite often both the auditee and the auditors have to make important decisions on the basis of insufficient information and in a very limited timeframe. This might lead to a variety ...

Get Assessing Information Security: Strategies, tactics, logic and framework now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.