IT Audit & Compliance

How to audit company projects: goals of an IT project audit, the phases to review from start-up to training, and a practical checklist for each phase.

How to audit cloud computing and outsourced operations: shared responsibility, vendor evidence like SOC 2 and ISO 27001, tools, steps and a checklist.

How to audit applications for security: scope, steps and a checklist for login, access rights, input handling, data protection, logging and change control.

How to audit WLAN and mobile devices: scope, tools, steps and checklists for Wi-Fi encryption, rogue access points, guest networks, MDM and lost devices.

How to audit virtualized environments: scope, tools, steps and a checklist for hypervisor patching, management access, VM sprawl, networks and backups.

How to audit storage systems such as NAS, SAN and cloud storage: types of storage, scope, steps and a checklist for access, encryption, backup and disposal.

How to audit databases such as MySQL, PostgreSQL, SQL Server and Oracle: scope, tools, step-by-step process and a checklist for access, patching, encryption.

How to audit web servers and web applications: scope, tools, steps and a checklist for TLS, headers, hardening, authentication, input handling and logging.

How to audit Unix and Linux systems: scope, tools like Lynis, useful commands, and a checklist for accounts, SSH, file permissions, patching and logging.

How to audit Windows operating systems: audit policy, useful PowerShell commands, and checklists for servers and clients covering patches, admins and logs.