Over the past few months, I have received a number of questions that seem to focus on the difference between a security assessment and a security audit. These are two significantly different things.

The Auditing Standards Board of the American Institute of CPAs has issued a suite of eight new standards on risk assessment that should significantly improve the quality of audits of private companies ...

Generally accepted auditing standards (GAAS) require the auditor to identify and assess risks of material misstatement (AU-C §315, Understanding the Entity and Its Environment and Assessing the Risks ...

Manpower audit and assessment activities enable your company to determine if your human resources meet your strategic needs. Quantitative methods allow you to use statistics, numbers and data to ...

The Public Company Accounting Oversight Board issued a report Thursday warning about significant deficiencies it is seeing in auditing firms’ assessment of risks in their clients. Processing Content ...

Security terms are sometimes confusing. And like all expressions, sometimes the definition can get subtly changed over time. An example of this is “security assessment” versus “penetration test”. I ...