Audit Trail: Teamwork Is Best Tool for CIOs to Use to Reduce
Risk  One of the biggest frustrations IT auditors have is that
their work sometimes leads to the company's spending time and
money to fix things that don't need fixing. That wastes valuable
resources that could have been spent elsewhere.  So why does
this happen, and how can you prevent it?  It happens because IT
and business management don't understand each other the way they
should. And in turn, neither understands the auditor's role in
risk management.  Businesspeople understand the business
processes that IT supports. But they generally don't understand
IT products and architecture. They aren't equipped to estimate
the relative level of control that certain IT products,
configurations and methods provide.  For their part, IT people
obviously understand architecture and products, but they're not
well equipped to estimate the impact that failed IT controls or
exploited vulnerabilities could have on the business.  Thus,
neither side understands the