When we speak of necessary evils, some images readily spring to mind. A dental appointment, automobile insurance, and many others. In cybersecurity, audits fit this image quite well. There are many uncomfortable aspects of audits, including the need to maintain accurate records, as well as finding the time to perform all the work required to satisfy the auditors. Deep down, we all know that audits are necessary. After all, we want to think that our systems are as secure as we say they are. All of the hard work, the due diligence, the checking and double-checking assures us that everything is...