1. What about audits?
This section introduces the context of information systems security auditing. It describes the main approaches to security auditing, which will serve as the basis for the other two parts of this dossier.
Auditing is a "systematic, independent and documented process for obtaining evidence and evaluating it objectively to verify that audit criteria are met". The auditor is then the "person with the competence to conduct an audit". (source: ISO/IEC 19011).
"The security audit of an information system (IS) is a view at a moment T of all or part of the IS, making it possible to compare the state of the IS with a repository." (source: Wikipedia).
You do not have access to this resource.
Exclusive to subscribers. 97% yet to be discovered!
Already subscribed?
Log in!
Ongoing reading
What about audits?