Automation as a Component of IT Risk Management

Automation is good, but it can give a false sense of security

My firm focuses specifically on software license compliance and technology auditing.

With technology, and specifically software inventories, there are a host of tools that can be used to automate and scan networks for inventory counts and related asset listings.

What I have personally seen over the years is a growing dependency on "networks scans" and automation... exclusively. What I mean by that is, some managers let automated numbers dictate policy, with very little oversight and review.

As I do believe that automation is paramount in today's commercial world (our systems and protocols are simply to big to do things "the old fashioned way."), nothing can replace the human-element when it relates to ANY type of auditing.

Computers are fast. But they don't form opinions. They can't construct strategic operational plans. And they can't interpret contacts.

My firm has seen many, many companies expose themselves to tremendous liability by relying strictly on data compilations from automated system protocols, exclusively. Sadien's strategy is to help clients use technology to "harvest" the data, and allow human beings interpret it. (A rudimentary concept I know... but a conceptual practice that seems to be fading with time.)

Again, our arena of internal auditing is a bit different, but closely related, nonetheless.

We have a view short videos that anyone is welcome to view that covers similar topics. http://www.sadien.com/video.html

G.C. Hutson
Chief Executive and Partner
Sadien Intellectual Property, Inc.
http://www.sadien.com