> -----Original Message-----
> From: IBM Mainframe Discussion List On Behalf Of R.S.
>
> Ted MacNEIL wrote:
>
> >>should occur to someone that auditors spelling out
> >
> > such 'requirements'
> >
> > Auditors neither make rules, nor enforce them.
> > All they can do is report.
> >
> > A lot of people ascribe too much power to an auditor.
>
> Maybe I re-phrase it:
> Auditors neither SHOULD make rules, nor SHOULD enforce them.
> <vbg>
> But seriously: I'm not sure about the above. Who should
> enforce the rules ?
Management.
Auditors merely report to management and stakeholders how well (or
poorly) management enforces management's own rules and complies with
appropriate standards set by recognized standards-setting bodies
(including legislatures).
(Now _there's_ a tedious sentence.)
-jc-
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
