From the course: CISA Cert Prep: 4 IT Operations, Maintenance, and Service Delivery for IS Auditors

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Auditing networks

Auditing networks

From the course: CISA Cert Prep: 4 IT Operations, Maintenance, and Service Delivery for IS Auditors

Start my 1-month free trial

Auditing networks

“

- [Instructor] Now when it comes to auditing, networking, the most important thing to start with is really checking to see if they have any of their network documented. Typically someone who's on top of their game has pretty good documentation, and it's up to date. So, that really speaks to their configuration management. Remember configuration management is all about making sure you've got detailed documentation and configuration information stored in a logical way about the physical network. So if you've got good configuration practices in place, you have a good set of documentation. You've got a good set of your configurations stored and checked and approved, et cetera. Now once you've got that, then you look at their change control policies, how well are they actually implementing changes. Is there a review process in place? Are they going through a process that forces them to do some testing, and that have a rollback and a mitigation if something goes south. How do we get back to…

Contents