Please review the following 8 topics and provide the solution for each as per the requirements identified in the MUSH HAVE SECTIONS:
Topic# 1: Introduction to IT Auditing
Conducting audits and assessments of IT environments has increasingly become more important and visible since the collapse of companies such as Enron and WorldCom in the early to mid-2000s. Although they might share similar qualities, the differences between an audit and an assessment can be great. Likewise, internal auditors and external auditors have many of the same functions, yet some important differences exist in their roles and expectations. Regardless, assessments, audits, and auditors are all key components to ensuring successful risk management and compliance strategy.
MUST HAVE: 1.5 Page with one citation
Discuss and explain the differences between an audit and an assessment
Discuss and explain the differences between internal and external auditors.
How do all of these contribute to ensuring successful risk management and compliance
strategy?
Topic# 2: Understanding IT Framework, Standards, and Audit Regulations
MUST HAVE: 1.5 Page with one citation
What do you think were the critical factors that fueled the need for IT governance?
In what ways did ISO affect the standards for network security?
Topic# 3: Risk Management: Using the Audit Process to Protect Your IT Assets
MUST HAVE: 1.5 Page with one citation
There are five phases that frame the risk management life cycle.
Which of the five is the most significant in your opinion?
Justify your answer with examples and at least one scholarly resource.
Topic# 4: Assessing Applications and Securing Wireless Networks in the Enterprise
MUST HAVE: 1.5 Page with one citation
Describe the importance of choosing a proper authentication
method for your wireless network.
What makes some methods better than others?
Topic# 5: Assessing Applications and Securing Wireless Networks in the Enterprise
MUST HAVE: 1.5 Page with one citation
Describe why it is important to secure all network equipment in a protected area
Explain the potential problems that can take place if these steps are not followed.
Topic# 6: Achieving Compliance in a Virtualized Environment and the Cloud
MUST HAVE: 1.5 Page with one citation
What steps would you take to guarantee both physical and virtual machines are patched in
accordance with regularly scheduled releases?
Be sure to defend your thoughts with reference to the readings.
Topic# 7: The Audit Process Within Your Data Center
The remote access domain opens applications and resources to remote users. Doing so has the potential for exposing an organizations internal environment to more threats. Because this domain commonly connects remote users to your environment using an untrusted WAN, you must ensure the controls protect your internal resources. Selecting, deploying, and managing the right security controls can provide efficient and secure access across an untrusted WAN. To help with that challenge, an organization should consider emerging alternatives that would help their businesses enable more cost-effective but safe remote access.
MUST HAVE: 1.5 Page with one citation
Elaborate upon an emerging alternative that an organization could implement.
Topic# 8: Observing Your Business Processes: Database and Storage Components
MUST HAVE: 1.5 Page with one citation
Describe the role encryption plays in protecting data.
Examine where an organization should begin when it comes to choosing an encryption vendor.
What features make up an effective encryption method?