The Role and Importance of Internal Auditor for Information Security Management System

Abstract

         Currently, the information technology had developed rapidly an important role in the operation of various organizations. The Information security had become an important issue for the various business in Thailand and other countries in the world. The information security prevents access to the necessary information. The organizations need to comply with data security requirements. However, the organizations faced many problems in improving the Information Security Management System.

         Information Security Management System (ISMS) or ISO27001:2013 is the measures for the security of information systems. It is key to managing an organization's information technology systems and has been widely used as a standard in the management of information security. The key to processes that made the project successful was the internal audit. The internal audit is an important part of quality control within the organization. The internal auditors achieve objectives of the internal audit and internal control of the activities was effectiveness.

         Therefore, internal auditors are the key to driving, encourage and promote the implementation of the objectives and goals for instance 1) To encourage good corporate governance. 2) To promote accountability and responsibility for reporting. 3) To encourage efficiency and effectiveness performance of the operation. 4) Check and balance Internal Controls and 5) Warning signals for misconduct or corruption in the organization.