Is the audit function aware of how the enterprise is changing to support mobility? Do they perform critical functions to ensure that controls are in effect on mobile devices?
Have internal audit function Most small and medium businesses have an internal audit function which oversees the processes and controls used in the company to manage risks. Mobile Security is reviewed as part of General Computing Controls General Computing Controls are the standard security and operational controls found in Information Technology. Adding Mobile Security is critical to assessing the companys ability to secure the data stored and accessed from a mobile device. This will require auditors with a general understanding of how to apply GCC to mobility. Separate mobile device security audit Performing a mobile device security audit focuses on performing testing of the controls in place in the GCC above. This will require auditors that specialize in mobile computing that are able to test the controls. Audit performs penetration testing of mobile device security and wireless infrastructure Perform testing to ensure that the devices are secure from a wireless standpoint. Review w
