CompTIA Security+ SY0-701 Certification Guide - Third Edition

27

Explain types and purposes of audits and assessments

Introduction

This chapter covers the fifth objective of Domain 5.0, Security Program Management and Oversight, of the CompTIA Security+ exam.

In this chapter, we look at the world of audits, a critical component of organizational governance and accountability, considering the importance of attestation on both counts. Audits serve as essential tools for assessing compliance by evaluating the effectiveness of internal controls and identifying areas for improvement within an organization. This chapter focuses on both internal and external audits and the benefits of each and ends with an exploration of penetration testing, including passive and active reconnaissance.

This chapter will give ...