IT auditors’ lack of hands-on skill in information technology influences data breach likelihood and technical evidence interpretation for critical infrastructure (power, water, communication, and banking). This study distinguished what the auditors know (declarative knowledge) from what the auditor can do (procedural knowledge) by creating declarative and procedural knowledge assessment inquiries.

Read full article on Security Magazine