From the course: CCSP Cert Prep: 6 Legal, Risk, and Compliance Audio Review

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Security audits Q&A

Security audits Q&A

From the course: CCSP Cert Prep: 6 Legal, Risk, and Compliance Audio Review

Start my 1-month free trial

Security audits Q&A

- [Narrator] Here's a question about audits and assessments similar to one that you might find on the CCSP exam. You work on the cyber security team of your organization. Your manager would like you to review the firewall rules on a device managed by your colleagues to make sure that there aren't any errors or unnecessary rules. What type of engagement are you conducting? Is this an external audit, an internal audit, an assessment, or an account review? (clock ticking) (alarm ringing) This is an example of an assessment. It's a review being conducted internally regarding your own organization. It's not an audit because it was requested by an IT manager, not someone outside the IT organization. It's also much more informal than an audit. (gentle music)

Contents