ABSTRACT
Information security audits can be overwhelming and complex. However, understanding the process and how to reduce costs associated with them can make them less intimidating. This chapter explains the information security audit process and then discusses how audit documentation can be used to limit legal liability.
