If an IS audit is planned insufficiently and not coordinated with all the employees responsible in the organisation in question, the correct contact persons may not available during the on-site audit. As a result, it may be impossible to audit individual areas at all. If the IS auditors set too tight a schedule for auditing individual areas, the organisation may only be superficially audited due to a lack of time.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)