Documenting business processes and how money flows through the organization might not be glamorous but it is well worth the effort for security teams.

IT auditors can manage their engagements more effectively by ditching common buzzwords in favor of less combative language.