Software Audit Qualifications

[Churchill]

Ok folks, has anybody any experience of such a thing?

[oracleslave]

Ok folks, has anybody any experience of such a thing?

Do you mean as in system security and controls type auditing or more auditing to check that an implementor hasn't screwed up, strayed from best practices etc etc.

[BoredBloke]

Only in so far as using ED to discover what has been loaded on boxes for the CMDB (Windows and solaris here) and building their fingerprints to do the auto recognition thing.

[Churchill]

Do you mean as in system security and controls type auditing or more auditing to check that an implementor hasn't screwed up, strayed from best practices etc etc.

The latter...