Compliance: How to Manage (Lame) Audit Recommendations

Auditor skills run the gamut from "wet behind the ears" to "a little knowledge is a dangerous thing" to "the pedantic know-it-all".  It is a breath of fresh air, though an infrequent experience, to encounter an auditor with solid experience and knowledge in the target audit domain, and equally solid recommendations. Couple that with your management's inclination to do what the auditor asks to get them out of your hair, and you end up having to divert precious time and resource to implementing many really lame audit requirements and recommendations. At the same time, audit findings and recommendations are usually presented out of context of any risk management evaluation and priorities. Does that seem broken to you? 

Our speaker will show you how to leverage your Risk Management Program to defend your time, energy, and resources from inexperienced auditors and the uninformed requirements they try to impose on you.

Tracks: Disaster Recovery and Business Continuity and Security and Compliance