presents
"Auditing the Connected Organization"
(New IT Audit Seminar)
FREQUENTLY ASKED QUESTIONS
Q:
Will the seminar take into consideration security issues?
A:
Yes, security will be a significant part of the discussions
throughout the entire three days.
Q:
Would IS Department staff benefit from this seminar?
A:
Yes, we believe so. It is extremely difficult to stay "current", including those consulting daily with organizations in this area.
Q:
To what extent will mainframe issues be discussed?
A:
Mainframe issues will be covered in some aspects, but primarily as it relates to security, systems criticality, fault tolerance, access controls, remote access protocols, etc.
Q:
Will you cover the hardware, its location and protection, the cabling and other physical infrastructure?
A:
Included in the Physical Organization topic will include all aspects of the physical environment, including cabling, network devices and physical security of these devices.
Q:
What level of experience is required for this seminar?
A:
This seminar is going to build from the basics to the tools and expertise you need to audit the "Connected Organization".
Q:
Are the subjects of data/communications confidentiality, data integrity and systems availability covered in the Business Organization section?
A:
Yes, all of these will be covered, however some will be discussed in the security section.
Q:
Does the term "Security Architecture" include both organization and the technology?
A:
Yes.
Q:
Aren't the terms "AAA" and "Access Control" synonymous?
A:
"AAA" (Authentication, Authorization and Auditing) are the processes of an individual gaining access to and definition of authorized services. Access control involves additional data flow controls and access to devices that provide authentication and authorization to a user. Access control really is at a lower level than "AAA", but does include "AAA" in its broad scope.
Q:
What do you mean by the bullet, "Services"?
A:
Services are the applications which are being provided to users, like HTTP (Web), FTP, email, telnet, etc.
Q:
Will System Development Lifecyles be discussed?
A:
An overview of application development as it relates to emerging technologies and security will be presented.
/Home/
Services/
Current Issues/
Links