6.5: Auditing Computer operations

Question 1

Auditing Computer operation includes

Answer 1

• System configuration standards
• System build procedures
• System recovery procedures
• System update procedures
• Patch management
• Daily tasks
• Backup
• Media control
• Monitoring

Question 2

Examining SYSTEM CONFIGURATION STANDARDS OF IT computer operations

Answer 2

Examine configuration standards that specify the detailed configuration settings for each type of system that is used in the organization

Question 3

Examining SYSTEM BUILD PROCEDURES of IT computer operations

Answer 3

Examine the procedures used to install and configure the operating systems.

Question 4

Examining SYSTEM RECOVERY PROCEDURES of IT computer operations

Answer 4

Examine procedures used to recover systems from various types of failures.

Question 5

Examining UPDATE PROCEDURES of IT computer operations

Answer 5

Examine procedures used for making changes to systems, including configuration changes and components upgrades.

Question 6

Examining PATCH MANAGEMENT of IT computer operations

Answer 6

Examine procedures for receiving security advisories, risk analysis and decisions regarding when new security patches should be implemented. Procedures should include testing, implementing, and verification.

Question 7

Examining DAILY TASKS of IT computer operations

Answer 7

Daily and weekly operating procedures and systems should be examined, which may include data backup, log review, log life cycling, review of performance logs and system capacity checks.

Question 8

Examining BACKUP of IT computer operations

Answer 8

Examine procedures and records for file and database backup, backup verification, recovery testing, backup media control and inventory, and off-site media storage.