Cloud Auditing Best Practices

10

Walk-Through – Assessing Change Management, Logging, and Monitoring Policies

In the previous chapter, we put our knowledge of network, infrastructure, and resource controls to the test. Now, we will practice identifying and assessing change management, logging, and monitoring policies.

In this chapter, we’ll cover the following main topics:

• Preparing to assess change management controls
• Assessing audit and logging configurations
• Assessing change management and configuration policies
• Assessing monitoring and alerting policies

We will pose sample assessment questions and execute a basic test procedure for each of the topic areas. By the end of this chapter, we will have a deeper understanding of assessing change management, logging, ...