How to audit routers, switches and firewalls: scope, tools, step-by-step process and a practical checklist for management access, configs, rules and logs.
How to audit data centers and disaster recovery: physical security, power and cooling, operations, backups, DR plans, RTO and RPO, testing.
Auditing entity-level controls in IT: what they are, why they matter, five audit steps and a checklist for governance, risk, policies and oversight.
The IT audit process step by step: planning, risk assessment, control evaluation, testing and evidence, reporting and follow-up.
How to design and implement security controls: control types and functions, a risk-based design process, the CIS Controls, testing, metrics.
A guide to IT auditing standards and frameworks: ITAF, IIA standards, ISO 19011, COBIT, ISO 27001, NIST CSF and SP 800-53, SOC 2, PCI DSS, COSO and ITIL.
The seven IT infrastructure domains auditors use, from users to applications: what each covers, its main risks and the key controls to check in an audit.
What an IT audit is, why organizations need one, the main types, what it covers from governance to security, the procedure step by step.
What an investigative (forensic) audit is, when organizations need one, the scope, step-by-step process, how digital evidence is handled.
What a compliance audit is, who needs one, what it covers, and the step-by-step process from planning to follow-up, with examples like ISO 27001 and PCI DSS.
