“That's a key point, our chief auditor and the head of IT both have the same partnering mentality…Our chief
auditor …. [has] always been very careful to not create an adversarial relationship as an auditor because
when you do that's when people stop sharing information freely and it really slows the process down and
makes it very difficult and cumbersome…” — Information Systems Security Manager, Institution C