Understanding and Executing Compliance Audits

While there are a number of great points in the article, there is a key consideration that cannot be overlooked during compliance audits – the difference between what should be done, and what is being done.  Most audits, especially those that are questionnaire-based, gloss over the actual practices within an organization in deference to what the policy states. Make sure you review the policies as well as the practices that are actually in use. – JJM