Tech: The Security Report Card

Articles Steve Mar, CFSA, CISA Dec 08, 2025

Auditors can use five essential steps to assess whether penetration tests make the grade.

Reviewing penetration tests can help ensure they identify vulnerabilities and strengthen IT security.

You are attempting to access subscriber-restricted content.

Are You Ready to Experience Everything Internal Auditor (Ia) Has to Offer? Sign in or become a member to gain access to the latest internal audit news and information today.

IIA Resources

Learning

Auditing the Cybersecurity Program Certificate – Instructor-led training course
Auditing the Cybersecurity Program Certificate – OnDemand course
Fundamentals of Cybersecurity Auditing – Instructor-led training course

Steve Mar, CFSA, CISA

Steve Mar is a part-time professor in the Albers School of Business and Economics at Seattle University and a cybersecurity and technology audit consultant for ITK in Honolulu.

Learn more with our other resources

Articles

The Human Element

Articles

Basics: The Power of Courage

Articles

Power Struggle

Articles

Tech: The Security Report Card

Auditors can use five essential steps to assess whether penetration tests make the grade.

You are attempting to access subscriber-restricted content.

IIA Resources

Learning

Steve Mar, CFSA, CISA

Learn more with our other resources

The Human Element

Basics: The Power of Courage

Power Struggle

Update: Confidence Gap