Technology Systems Auditing (Part 2 of 2)

Clarify and establish defined and documented security management roles and responsibilities, then communicate them to all relevant personnel and management to ensure accountability.

Enforce security before granting customer access by establishing justification and authorization, and ongoing monitoring of internal assets; protect assets with vulnerability management and incident reporting, and allow revocation of access.

Identify and secure points of entry to front-end or back-end systems to control access from an organization's networking or telecommunications infrastructure into information resources, including network connectivity and remote access.

Consolidate users into a single architecture to enable a single sign-on, reducing password management and cross-server logins, but raising cross-platform deployment costs and a potential single point of failure.

Define authorization as what you can do, driven by access rules that specify who can access what. Set file-level permissions like read, write, create, update, delete, and execute.

Examine centralized and decentralized logical access security administration, highlighting onsite management and timely incident response in locations. Consider risks from local branch standards diverging from headquarters and gaps in audits.

Explore common firewall attacks, including IP spoofing and fragment attacks, that bypass packet filters with spoofed source addresses. Understand source routing and legacy IP routing behavior.

Learn how encryption turns plain text into ciphertext to protect data in transit and at rest, hashing detects changes, authenticates data, and algorithms and key length influence security.

This lecture shows how encryption protects e-commerce, detailing ssl/tls, ipsec for vpn, secure email, and set for card processing, while stressing that security rests on key randomness and length.

Private branch exchange enables digital phone networks, routing voice like voip with a network, switch, hubs, and cables, separate from data network and facing theft of service and unauthorized access.

Audit network infrastructure security by mapping connectivity with diagrams, identifying designs, IP naming and subnet schemes, and evaluating security policies, SLAs, and upgrade procedures for vulnerabilities.

Audit remote access by testing connections, analyzing risks, and ensuring cost-effective, risk-based controls. Inspect email outside the local area network, marketing channels, and e-commerce to identify security risks.

Explore computer forensics to identify, preserve, analyze, and present digital evidence in legally acceptable ways, maintain chain of custody, secure originals, and apply inventory, indexing, and analysis techniques.

Assess and assure that policies, standards, procedures, and controls protect information assets by ensuring confidentiality, integrity, and availability, while evaluating data classifications, physical access, and storage, transport, and disposal processes.