While some security managers view auditors as a necessary evil, they can in fact be a great ally. Aside from the fact that an auditor can provide an objective assessment of security, audit results can often be used to emphasize much-needed actions to senior management. However, this will never be effective unless the security manager ensures that the necessary time and resources are dedicated to audit activities.
