Auditing Security and Controls of Windows® 2000 and Windows® XP Professional - Softcover

Derek Melber

Softcover

ISBN 10: 0894135627 ISBN 13: 9780894135620

Publisher: The Institute of Internal Auditors Research Foundation, 2005

Synopsis

Client computers are the source of more attacks and vulnerabilities than any other computer in the enterprise. However, clients are often left out of the standard audit due to lack of time, money, and resources. If clients are used for attacks or are attacked more than servers and they make up a substantially higher percentage of overall computers on the network, then why are they being neglected in the audits? The answer is simple: Clients don’t house the data and applications, and therefore, they are ignored in lieu of servers being the target of the audit. Auditing Security and Controls of Windows® 2000 and Windows® XP Professional will: - Change your mind on how you perceive clients so you can incorporate them into the audit, making the overall security and stability of the network dramatically increased. - Solve issues regarding security control points, scope of clients, and target goals. - Discuss terminology that can help you perform better interviews to gather information. - Pinpoint where each control point resides for a client. - Illustrate some different tactics for the sampling procedure, which might allow you to streamline the selection and evaluation process. - Lay out a detailed audit plan that will allow you to take the knowledge you learned and put it into action.

About this title

About the Author

Derek Melber, MCSE, CISM, is one of the leading technical instructors, authors, and consultants in the nation, with an innate understanding of how to decipher, organize, and communicate complex issues. With a master’s degree from the University of Kansas, Microsoft® Certified Systems Engineer Certification, CISM, A+ Certification, Microsoft® MVP, and 10 years of solution development, training, public speaking, sales, and management experience, he has used his experience and knowledge to write numerous books on Windows Active Directory, Security, Auditing, and certifications. He provides custom training on Windows Security, auditing, Active Directory, Group Policy, and administration. You can also visit his online training for Auditing Windows Security at www.auditlearning.org. He is a contributing editor to ESJ newsletter, RIAG Journal, IT Audit newsletter, and various other publications. He is a frequent speaker at various conferences, including those for The Institute of Internal Auditors, TechMentor, and MISTI. Mr. Melber has taken his years of experience to develop the only Web site dedicated to Windows Auditing and Security, www.auditingwindows.com. The Web site links to his book series on Auditing Windows Security, his publications, and online training. The Web site keeps up on the pulse of Windows security, providing documents, applications, and other resources to the auditing community. He has developed and trained individuals from the most prestigious organizations and corporations around the world, including AT&T, Boeing, Intel, Citibank, Walt Disney, United Airlines, Hewlett-Packard, Compaq, Sony, the Department of Education, all branches of the U.S. military, and even Microsoft® itself.

Edition details

• Publisher: The Institute of Internal Auditors Research Foundation
• Publication date: 2005
• ISBN 10: 0894135627
• ISBN 13: 9780894135620
• Binding: Paperback
• Language: English
• Number of pages: 121