External Auditor (Stakehodler - IAM)

External Auditor

This persona is used to designate auditors and controllers that are external to the organization (e.g.: ITGC, PCI/DSS, etc.). To be distinguished from the Internal Control (Stakeholder - IAM) that designates auditors and controllers that are internal to the organization (e.g.: Internal Control).

• Policy

• Governance

• Risk and compliance

• Monitoring, metrics and reporting

• Entitlement review and certification

• Regulations

• Audit findings

• Osmanoglu et al., 2013, p. 58

• Royer, 2013, p. 53