System Auditor Question:
Download Questions PDF

Do you know what’s the goal of information security within an organization?

System Auditor Interview Question
System Auditor Interview Question

Answer:

This is a big one. What I look for is one of two approaches; the first is the über-lockdown approach, i.e. “To control access to information as much as possible, sir!” While admirable, this again shows a bit of immaturity. Not really in a bad way, just not quite what I’m looking for. A much better answer in my view is something along the lines of, “To help the organization succeed.”

This type of response shows that the individual understands that business is there to make money, and that we are there to help them do that. It is this sort of perspective that I think represents the highest level of security understanding—-a realization that security is there for the company and not the other way around.

Download System Auditor Interview Questions And Answers PDF

Previous QuestionNext Question
Tell me how does one defend against CSRF?Please explain what is your experience with developing business metrics?