Security Audits Cause More Harm Than Good
Gestalt IT, Tuesday, April 23rd, 2024
Security audits are painful and often required for compliance but they aren't adversarial unless you have a bad auditor or bad policy compliance. In this episode, Tom Hollingsworth sits down with Teren Bryson, Skye Fugate, and Ben Story to discuss the nuances of audits.
The panel discusses the discovery of technical debt, external versus internal auditing, the need for flexibility in procedures. and how good auditors can make for a more positive outcomes.
Thorough audits will uncover issues with compliance as well as technical debt. This could include older devices that should have been replaced at the end of their life. It could also find code versions that are vulnerable to exploits and could lead to more issues. While operations teams don't like being told things aren't as they should be it's better to know about those problems early before they get out of control.