Fundamentals of Information Systems Security, 4th Edition

Auditing Benchmarks

A benchmark is the standard collection of configuration settings or performance metrics to which a system is compared to determine whether it is securely configured. One technique in an audit is to compare the current setting of a computer or device with a benchmark to help identify differences.

In this section, you will find common ways to audit or review systems, devices, business processes, or security controls. All of these examples are best practices and often are used as guidelines for auditing a business or business process. An organization’s management may have formally adopted one of the following examples, which can be especially true if the organization is subject to government regulation or legislation. If so, ...