Adversaries to Allies: CISOs and Auditors Build Trust

An interview with Denver Auditor’s Office IT audit manager Peter Ulrich explores how auditors and CISOs can collaborate effectively in government by maintaining independence, fostering transparency, and focusing on risk reduction rather than blame. It covers balancing public disclosure obligations (CORA/FOIA) with security under GAGAS, the importance of trust and role clarity, and promotes a service-oriented audit approach that avoids “gotcha” tactics while driving pragmatic remediation and security improvements.