In theory, IT auditors and IT professionals want the same thing: a secure, well-designed and efficient IT environment that -- ultimately -- helps the business better serve all of its customers.
In spite of this, and throughout my career as an IT auditor, I've come to realize that many IT professionals secretly view IT auditors as their nemesis.
There are two main reasons for this:
- A lack of understanding about what IT auditors do and don't do.
- The fact that, like mechanics and doctors, there are good auditors and bad auditors.