6.4: Auditing Network Operation Controls

Question 1

Why auditing network operating controls

Answer 1

To determine whether the organizations operating its network effectively.

Question 2

what are included in auditing network operating controls

Answer 2

• Network operating procedures
• Restart procedures
• Troubleshooting procedures
• Security controls
• Change Management

Question 3

Examine NETWORK OPERATING PROCEDURES of network operating controls

Answer 3

Examine procedures for normal activities for all network devices and services. These activities include : login, startup, shutdown, upgrade, and configuration changes

Question 4

Examine RESTART PROCEDURES of network operating controls

Answer 4

Procedures for restarting the entire network should exist and be tested periodically

Question 5

Examine TROUBLESHOOTING PROCEDURES of network operating controls

Answer 5

Examine troubleshooting procedures for all significant network components

Question 6

Examine SECURITY CONTROLS of network operating controls

Answer 6

Operational security controls should be examined, including administrator authentication, administrator access control, logging of administrator actions, protection of device configuration data, security configuration reviews, and protection of audit logs.

Question 7

Examine CHANGE MANAGEMENT of network operating controls

Answer 7

All changes to network component and services should follow a formal change management life cycle., including request, review, approval by management, testing in a separate environment, verification, and complete recordkeeping. Examine change management policy, procedure, and records.