How to audit WLAN and mobile devices: scope, tools, steps and checklists for Wi-Fi encryption, rogue access points, guest networks, MDM and lost devices.
How to audit virtualized environments: scope, tools, steps and a checklist for hypervisor patching, management access, VM sprawl, networks and backups.
How to audit storage systems such as NAS, SAN and cloud storage: types of storage, scope, steps and a checklist for access, encryption, backup and disposal.
How to audit databases such as MySQL, PostgreSQL, SQL Server and Oracle: scope, tools, step-by-step process and a checklist for access, patching, encryption.
How to audit web servers and web applications: scope, tools, steps and a checklist for TLS, headers, hardening, authentication, input handling and logging.
How to audit Unix and Linux systems: scope, tools like Lynis, useful commands, and a checklist for accounts, SSH, file permissions, patching and logging.
How to audit Windows operating systems: audit policy, useful PowerShell commands, and checklists for servers and clients covering patches, admins and logs.
How to audit routers, switches and firewalls: scope, tools, step-by-step process and a practical checklist for management access, configs, rules and logs.
How to audit data centers and disaster recovery: physical security, power and cooling, operations, backups, DR plans, RTO and RPO, testing.
Auditing entity-level controls in IT: what they are, why they matter, five audit steps and a checklist for governance, risk, policies and oversight.
