At our company each team (Windows, Linux, Networking) is responsible for defining and auditing their own security. We also have external auditors that audit both our internal and customer systems. We have a few HIPAA environments that are checked by external auditors and we also do SSAE16 audits.
↧