Auditing Product, Engineering

For growth-stage technology companies, the engineering function represents both the largest concentration of operational risk and the least commonly audited area. Code changes production systems that serve customers; deployment pipelines introduce new versions thousands of times per year at mature companies; engineers have privileged access to systems that process regulated data.