>Is there an organization that rates security auditors? If not, is it time to create one? ...
My first experience with an auditor was at the Ontario Government. I asked him what he knew about IT. He said: “I don't have to know anything about it. I'm a chartered accountant.” I said: “OKAY! I'm not volunteering anything. You need to know? Ask”. I got hauled up on the carpet for being uncooperative. My response was: “I don't know anything about chartered accountants, so I don't know what to tell him without him asking questions”. I had no intention of giving the hangman any rope. -teD In God we Trust! All others bring data! -- W. Edwards Deming ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
