Cisco Switches and Routers: Access Methods and Security Assessments

To do an IT audit well, the auditor needs different skills and knowledge beyond competencies in audit methodology and processes. Having some technical background may be very helpful in IT auditing. Common areas of IT auditing are networks and infrastructure. As an example, in this chapter, we will speak about the popular network devices made by Cisco. Since they are common subjects of audit reviews, we will explain how to assess them. We selected these devices due to their popularity and access to tools such as Cisco Packet Tracer (https://www.netacad.com/courses/packet-tracer) to reinforce real-world configuration experiences. You will explore the architecture and functions of Cisco switches and routers, understand the security risks associated with these devices, learn about the various access methods available, and walk through the process of conducting detailed security assessments, including using the Cisco Command...