test please delete

[Xenophon]

But most folks don't get that it's not people I am auditing it's the processes.

I get it.

[DaveB]

When in fact it's usually the processes at fault.

[DaveB]

Or senior management have chosen to ignore the problems for "business reasons"

[DaveB]

Like the client I audited a while back.

[DaveB]

Who didn't keep archives of transaction logs and system changes.

[DaveB]

Because they didnt see it as a "business priority".

[DaveB]

Despite it being a contractual requirement. i.e. they thought they could get away with it and didnt want to spend the money.

[DaveB]

Of the client who ran a *serious* hosting operation in a very large data center.

[DaveB]

Who removed the old Halon fire supression system when it was banned.

[DaveB]

But didnt bother replacing it with anything.