>The method in my madness is to somehow get real value out of an audit rather >than just produce a bunch of meaningless reports. Let's face it, coming up with a good answer to a good question is often a good thing for the shop, IMHO.
An auditor is not an enforcer. The proper procedure is: 1. Subject Matter Experts tell us what is best. 2. Auditors compare us to what we are are doing vs what the SME states. 3. Compliance staff enforce -- or report to management regarding non-compliance. Auditors do not set standards. - Too busy driving to stop for gas! ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
