SANS offers tips for IT audit survival

Enterprise IT managers need not dread third party security audits, say researchers with security firm SANS.

The company on Monday issued a short list of tips to help IT departments get through audits with minimal headaches.

Among the tips provided by SANS handler Mari Nichols were not to panic prior to an audit, but also be prepared and have possible questions answered in advance. Nichols also recommended that administrators keep copies of security training materials and IT security policies handy.

Other tips included paying careful attention to logging and keeping an untouched workstation on hand for the auditors to browse.

Most importantly, however, was maintaining the right attitude. Nichols said that IT departments should approach audits not as a dreaded chore, but as a learning experience and chance to beef up security protections.

"Playing these situations to your fullest abilities will not only increase the profitability of your business, it will also result in a tightened down security posture for your company," she wrote.

"This may be the straw that increases security in your environment. You may even get your pet project going again after frustrating funding delays."