Audit/Monitor Controls or Audit/Monitor BEFORE Control?
...controls after you put them in place; you monitor after you have authentication and authorization taken care of and you detect the violations after you organized your administration
The paper even had the following picture, which is presented here to illustrate the point
source: Forrester paper named above
The paper clarifies: "With people...





