Walk-Through – Assessing Change Management, Logging, and Monitoring Policies
In the previous chapter, we put our knowledge of network, infrastructure, and resource controls to the test. Now, we will practice identifying and assessing change management, logging, and monitoring policies.
In this chapter, we’ll cover the following main topics:
- Preparing to assess change management controls
- Assessing audit and logging configurations
- Assessing change management and configuration policies
- Assessing monitoring and alerting policies
We will pose sample assessment questions and execute a basic test procedure for each of the topic areas. By the end of this chapter, we will have a deeper understanding of assessing change management, logging, and monitoring policies as part of an enterprise cloud audit.
