Auditing IT Infrastructures for Compliance, 3rd Edition

Using Automated Audit Reporting Tools and Methodologies

Many organizations use automated audit reporting tools. Most systems, for example, are capable of producing many different types of audit logs. These logs detail various types of activity throughout the system, including security data. Examples include the following:

• Failed authentication attempts

• Technical policy changes

• Account changes

• Privileged use

Traditionally, the challenge is managing the voluminous amount of data generated by these systems. This problem is further compounded considering the number and different types of systems across an organization. The components within the seven domains of typical IT infrastructure, for example, are all capable of producing audit ...