Preparing to assess network, infrastructure, and resource controls
From Chapter 4, Network, Infrastructure, and Security Controls, to Chapter 6, Tips and Techniques for Advanced Auditing, we learned about some of the network, infrastructure, and resource controls available to enterprises across the three major cloud providers. As a reminder, we’ve only covered a subset of the various options that are available in order to provide some foundational knowledge. As we covered in Chapter 2, Effective Techniques for Preparing to Audit Cloud Environments, obtaining a thorough understanding of how the enterprise environment is architected and connected is critical to determining which areas within a cloud environment should be scoped for audit.
Having architectural diagrams that indicate areas of integration will highlight whether there are hybrid and/or multi-cloud controls that should be assessed. As we identified in our control walk-through in Chapter 8, Walk-Through –...
