eBook: Auditing Your Windows Infrastructure and Intranet Security - Practical Audit Guide for IT Assurance Professionals [$38.95]
Abstract
An in-depth, authoritative reference for intermediate and advanced IT Audit, IT Risk and Cyber Security professionals (IT Risk, Control and Cyber Security Series)
Following reports of Denial-of-Service attacks and data breaches on large corporation around the world in recent times and its attendant impact on business operations, the need to ensure security of the intranet and internet environment cannot be overemphasized. Considering the widespread use of Windows Operating Systems and other associated services, there is obvious need to ensure security of Windows infrastructure by implementing standard configurations, good internal control systems, enterprise policies as well as promotion of best practices and user awareness within the operating environment. Auditors and other IT Assurance professionals are duty bound to ensure the security of all enterprise systems by instituting a robust internal audit and security assessment process for continuous improvement of good security practices.
“Auditing Your Windows Infrastructure, Intranet and Internet Security” by Nwabueze Ohia provides insight to IT Assurance professionals (Information Systems Auditors, Information Systems Controllers, IT/IS Security and IT/IS Risk professionals) on how to successfully conduct audit or security review of Windows infrastructure, intranet and internet environment of their organizations. It first highlighted some of the risks, vulnerabilities, and process/control lapses associated with some Windows systems, Email Infrastructure (Exchange Server) and Active Directory/Domain Controller Infrastructure and how they can impact the security of intranet environment of organizations. This is important to raise the awareness of the reader on inherent risks/vulnerabilities associated with the Windows Infrastructure. Thereafter, it then highlighted the steps to carrying out the audit testing to verify the effectiveness or otherwise of controls around the following; Active Directory/Domain Controller, Exchange Server, TMG/ISA Server, Windows Servers and Workstations, Skype for Business Server, Virtualization Server and DNS Servers.
This exhaustive and comprehensive audit program provides a step by step guide on assessing the effectiveness of controls in an organization’s intranet and internet to ensure security. The book identified vulnerabilities inherent in Windows infrastructure (servers and services) in conjunction with their implications on confidentiality, integrity and availability of information assets. Detailed audit test procedure to verify the effectiveness of controls build around the system were provided in the book. The audit program covered enterprise policies (IT Security policy, password policy, acceptable use of computer assets policy, network policy, etc.), system administration, security baseline configuration for Windows infrastructure, logical access control and authentication, group policy object (GPO) settings, change management, enterprise log management and correlation, patch management, data loss prevention/endpoint management, vulnerability management, virus control, virtualization, instant messaging and email services, backup and archiving services, spam control, bring-you-own-device policy and administration, among others.
Who This Book Is For:
IT professionals moving into the security field; new security managers, directors, project heads, and would-be CISOs; security specialists from other disciplines moving into information security (e.g., former military security professionals, law enforcement professionals, and physical security professionals); and information assurance specialists (e.g. IT Auditors, IT Risk Managers, IT Control implementers, CAEs, CIOs, CTOs, COO) and other IT Support/Operation Professionals.
Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.
