Formulating a Security Policy › Primary Elements of a Security Policy › The Auditing Function

The Auditing Function

The auditors are responsible for monitoring the effectiveness of the security procedures and controls. Consider assigning the following responsibilities to them:

• To monitor all responsible areas to ensure that they adhere to the security policy.
• To audit the use of all critical system and application resources.
• To periodically monitor user activity.
• To monitor the access requirements set by the security administration area.