# Continuous Auditing and Continuous Certification in MEDINA – Security Auditor’s View

## TL;DR

This paper explores continuous auditing and certification in the MEDINA project from a security auditor's perspective, highlighting opportunities and challenges.

## Contribution

It provides a security auditor's view on implementing continuous auditing and certification in the MEDINA EU project.

## Key findings

- Continuous auditing and certification offer opportunities for improved security monitoring.
- Challenges include adapting traditional auditing practices to continuous processes.
- Further actions are needed to introduce these concepts to the market effectively.

## Abstract

This paper discusses views on continuous auditing and continuous certification in the context of the MEDINA EU project and the security auditing industry. Based on an introduction of MEDINA, the notions of continuous auditing and continuous certification are introduced from a security auditor’s perspective to discuss the opportunities and challenges related to these topics. The paper also discusses further actions beyond this project in order to provide feedback on how continuous auditing and certification can be developed and introduced to the market.