View CartView Cart

QuestionsContact Us

Audit Programs

Table of Contents:

This audit program provides a solid framework for assessing a wide array of key internal controls in Active Directory that form a foundation of a well managed and secure system. The audit program contains 47 controls across the following process areas: 

Batch and online processing
Controls to ensure that operations around scheduling (i.e. Task Scheduler Wizard, Windows AT Job Scheduler), performance, and monitoring of IT programs and processes in Active Directory are adequately supervised to ensure complete, accurate, and valid processing and recording of information.

Backup and recovery

Controls to ensure that Active Directory data is appropriately managed during the update and storage process to ensure it remains complete, accurate, and valid.

Physical security

Controls to ensure that adequate physical security mechanisms are in place and operate effectively (access to the building & immediate surroundings of computer equipment, etc.).

Logical security
Controls to ensure that system security settings in Active Directory are adequately configured and appropriately safeguarded to protect against unauthorized modifications that may result in inaccurate, or invalid processing or recording of information:
  • Passwords parameters for the Active Directory domain & any relevant OUs (i.e. Default Domain Policy) or similar authentication mechanisms in Active Directory
  • Active Directory security settings (group & domain security option settings, audit policy settings, event log settings, etc.)
  • User access privileges in Active Directory (new access, removal of users, segregation of duties, privileged access, etc.)
  • Security patches & fixes applied to prevent exploitation of known security vulnerabilities
  • Access restriction mechanisms for critical Windows system files and data files in Active Directory (file shares, etc.) and much more.

Change management and control

Controls to ensure that network and communication software is acquired, developed or modified, implemented, and managed in a manner that supports accurate, complete, and valid processing and recording of information.

Everything has been conveniently pre-documented with fill-in fields for company-specific information (entity name, date, data extracted from the system, etc.) which will allow you to proceed with your assessment immediately.

Please view an excerpt from the audit program to ensure it's right for you.
 
Price: $45.00 (Instant Download)


Add to Cart
View Cart