[Hidden-tech] Security Auditor

[Robert Heller]

At Mon, 7 Nov 2016 22:29:28 -0500 David Korpiewski <davidk at cs.umass.edu> wrote:

> 
> 
> 
> A company that I work for in the Valley has a yearly audit done and the 
> auditor has recently told the CEO that its now required to have a 
> computer security audit.  First I've heard of this, has anyone else 
> heard of a required security audit when you get your books checked??  As 
> the CEO wrote me:  "This isn't something they've made up; it's a legal 
> requirement that they give an opinion on the status of ours – 
> specifically, if there are gaps, they are required to bring these to the 
> attention of our board."

Does the company that you work for handle money transfers via computer (eg 
credit card processing or something like that)?  Or maybe their bookkeeping 
and/or payroll system is on computers.

> 
> Secondly, can anyone recommend a security auditor.  I'm not talking 
> someone who thinks they know what they are doing, but actually someone 
> who has done security auditing and is certified to do so.
> 
> Thank you very much
> 
> David
> 
> 
> 

-- 
Robert Heller             -- 978-544-6933
Deepwoods Software        -- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
heller at deepsoft.com       -- Webhosting Services