O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

4.6. Evaluating Network Infrastructure Security

As mentioned previously in the section covering the audit and review of network infrastructure in the previous chapter, you will need to understand the network configurations and their intended purposes in order to effectively review a network from a security control perspective. If the assessment has the objective of network device access, the process will be quite different. Your review, in this case, will start with an assessment of the network devices and the control capabilities of these devices. Routers, switches, hubs, and access points such as VPN concentrators, radius dial up servers, firewalls, and proxy devices may all be on the list of components you will want to inventory and analyze for control capability. Physical access security will be very important for this review as well and is discussed in detail a little later on in this chapter. Human resource processes for administrators will be a focus for this evaluation, because administrators have a very powerful set of access permissions and can cause catastrophic, system-wide problems if controls are not in place to manage this access and handle personnel issues such as unfriendly terminations with sensitivity. Many of these devices are not seen as needing account administration processes associated with them, so you will need to understand how access is being managed and controlled. Naturally, you also will want to get a status of the security patching processes employed ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required