IT Audit Field Manual: Strengthen Cyber Defense

IT Audit Field Manual: Strengthen Cyber Defense

Instructor: Packt - Course Instructors

Access provided by Adobe

13 modules

Gain insight into a topic and learn the fundamentals.

Beginner level

Recommended experience

3 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

13 modules

Gain insight into a topic and learn the fundamentals.

Beginner level

Recommended experience

3 weeks to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Evaluate cybersecurity across major cloud platforms using IT auditing principles
Conduct risk assessments to identify vulnerabilities in IT systems
Understand IT auditing careers, roles, and essential knowledge for professional growth

Skills you'll gain

Tools you'll learn

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

13 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

There are 13 modules in this course

This course equips IT professionals with the skills to navigate the evolving landscape of cybersecurity and compliance. It provides a structured approach to auditing IT systems, from foundational concepts to advanced techniques, with a focus on real-world applications and practical insights.

You will learn how to evaluate cybersecurity across major platforms like AWS, Azure, and GCP using IT auditing principles. Additionally, you will conduct risk assessments to identify vulnerabilities and strengthen your knowledge of IT system auditing. What makes this course unique is its practical, hands-on approach to cybersecurity evaluation, focusing on real-world scenarios that will help you develop essential auditing skills. Through this, you will be prepared to confidently assess cybersecurity measures in various environments. This course is ideal for aspiring IT professionals, especially those interested in security auditing, risk assessment, and compliance across cloud and IT infrastructures. While basic IT knowledge is helpful, no prior auditing experience is required.

In this section, we explore the role and importance of IT auditing, its evolution in cybersecurity, and key concepts essential for risk management and compliance in business processes.

What's included

2 videos5 readings1 assignment

2 videosTotal 2 minutes

Course Overview1 minute
Introduction to IT Auditing - Overview Video1 minute

5 readingsTotal 90 minutes

Introduction30 minutes
An IS Audit10 minutes
The Evolution of IT Auditing in Cybersecurity10 minutes
An Emphasis on Data Privacy and Protection20 minutes
Navigating through the Audit Life Cycle20 minutes

1 assignmentTotal 10 minutes

Foundations of IT Auditing10 minutes

In this section, we cover audit planning, scope definition, and stakeholder engagement to ensure effective and aligned audits.

What's included

1 video9 readings1 assignment

1 videoTotal 1 minute

Audit Planning and Preparation - Overview Video1 minute

9 readingsTotal 140 minutes

Introduction10 minutes
Defining Audit Scope and Objectives20 minutes
Audit Risks Versus Risks Identified by the Audit Mission10 minutes
Steps in Creating a Comprehensive Audit Plan20 minutes
Timeline Development20 minutes
Techniques for Developing Methodologies and Procedures10 minutes
Mapping Stakeholders20 minutes
Implementing the Communication Strategy10 minutes
Adjusting the Plan20 minutes

1 assignmentTotal 10 minutes

Audit Planning Fundamentals10 minutes

In this section, we explore Cisco switch and router security assessments, focusing on CLI-based checks, access methods, and risk evaluation for effective IT audits.

What's included

1 video7 readings1 assignment

1 videoTotal 1 minute

Cisco Switches and Routers Access Methods and Security Assessments - Overview Video1 minute

7 readingsTotal 110 minutes

Introduction10 minutes
Network Logs20 minutes
Access Methods for Cisco Switches and Routers10 minutes
Technical Features10 minutes
Auditing Cisco Catalyst 9200 Series Switches10 minutes
Auditing the Cisco 4000 Series20 minutes
Modular Interface Assessment30 minutes

1 assignmentTotal 10 minutes

Network Device Security and Configuration Review10 minutes

In this section, we explore NGFW auditing, focusing on Palo Alto PAN-OS configurations, policy optimization, and compliance techniques to enhance network security effectiveness.

What's included

1 video6 readings1 assignment

1 videoTotal 1 minute

Next-Generation Firewall Auditing - Overview Video1 minute

6 readingsTotal 110 minutes

Introduction10 minutes
The Audit Angle20 minutes
Navigating the PAN-OS Interface20 minutes
Policy Optimization and Rule Usage20 minutes
Refining Policies with the Application Filter20 minutes
Stale and Overly Broad Objects20 minutes

1 assignmentTotal 10 minutes

NGFW Auditing and Security Policy Evaluation10 minutes

In this section, we explore cloud security auditing, focusing on Azure and AWS. Key concepts include automation, compliance, governance, and best practices for securing cloud environments.

What's included

1 video8 readings1 assignment

1 videoTotal 1 minute

Cloud Security Auditing - Overview Video1 minute

8 readingsTotal 120 minutes

Introduction10 minutes
Impact of a Cloud Model on Cloud Security Auditing10 minutes
Continuous Monitoring and Automated Security10 minutes
Security Architecture's Impact on Auditing20 minutes
Governance20 minutes
Auditing in AWS20 minutes
Key Steps for Auditors Using AWS CloudTrail10 minutes
Compliance20 minutes

1 assignmentTotal 10 minutes

Cloud Security Auditing Fundamentals10 minutes

In this section, we explore Windows 10 and 11 endpoint security, focusing on Microsoft Defender, Windows Firewall, and BitLocker. We examine configurations, auditing, and best practices for effective risk mitigation.

What's included

1 video5 readings1 assignment

In this section, we explore Linux auditing, focusing on SSH security, user access controls, and firewall configurations to ensure system compliance and security through practical, real-world applications.

What's included

1 video6 readings1 assignment

1 videoTotal 1 minute

Linux Systems Auditing - Overview Video1 minute

6 readingsTotal 100 minutes

Introduction10 minutes
Auditing SSH Configurations10 minutes
Reviewing and Configuring PAM20 minutes
Analyzing and Hardening Kernel Security Parameters20 minutes
Auditing and Managing Sudo Privileges20 minutes
Auditing Firewall and Network Security with UFW and Iptables20 minutes

1 assignmentTotal 10 minutes

Linux System Security and Auditing Fundamentals10 minutes

In this section, we examine wireless access point and storage system auditing, focusing on security, compliance, and risk mitigation strategies for real-world applications.

What's included

1 video8 readings1 assignment

1 videoTotal 1 minute

Wireless Access Points and Storage Technology Auditing - Overview Video1 minute

8 readingsTotal 130 minutes

Introduction10 minutes
Assessing Physical Security and Placement20 minutes
Testing Wireless Security Protocols20 minutes
Testing for the Presence of Rogue Access Points20 minutes
Overview of Wireless Security Standards and Regulations10 minutes
Storage Technology Types and Risks20 minutes
Evaluating Access Controls and User Management20 minutes
Assessing Compliance with Data Protection Regulations10 minutes

1 assignmentTotal 10 minutes

Securing Wireless and Storage Infrastructure10 minutes

In this section, we explore data protection principles, privacy laws, and compliance measures to help auditors evaluate and improve data security practices effectively.

What's included

1 video6 readings1 assignment

1 videoTotal 1 minute

Data Protection and Privacy Considerations - Overview Video1 minute

6 readingsTotal 100 minutes

Introduction20 minutes
Children’s Online Privacy Protection Act (COPPA)20 minutes
The CIA Triad20 minutes
Conducting a Risk Assessment10 minutes
The Importance of Data Classification10 minutes
The Auditor’s Role in Data Privacy and Protection20 minutes

1 assignmentTotal 10 minutes

Data Protection and Privacy Fundamentals10 minutes

In this section, we explore structured audit reporting, stakeholder communication strategies, and risk-based remediation planning to enhance IT audit effectiveness and organizational security.

What's included

1 video7 readings1 assignment

1 videoTotal 1 minute

Reporting and Remediation - Overview Video1 minute

7 readingsTotal 120 minutes

Introduction20 minutes
Methodology and Approach10 minutes
Risk Rating Categories20 minutes
Communicating Findings to Stakeholders20 minutes
Presenting Findings to Non-Technical Audiences20 minutes
Prioritizing and Planning Remediation Efforts10 minutes
Collaborating with IT Teams on Corrective Actions20 minutes

1 assignmentTotal 10 minutes

Understanding Audit Reporting and Remediation10 minutes

In this section, we explore advanced IT auditing techniques, focusing on emerging technologies, cybersecurity frameworks, and practical application of standards like DISA STIGs and NIST CVEs to address evolving risks.

What's included

1 video7 readings1 assignment

1 videoTotal 1 minute

Advanced Topics in IT Auditing - Overview Video1 minute

7 readingsTotal 80 minutes

Introduction10 minutes
How to Stay Ahead of the Curve10 minutes
Understanding Cybersecurity Frameworks and Controls20 minutes
Introduction to Advanced Auditing Techniques10 minutes
Advanced Technique Focus DISA STIGs in Action10 minutes
Incorporating NIST CVEs into IT Audits10 minutes
Preparing for the Future of IT Auditing10 minutes

1 assignmentTotal 10 minutes

Advanced IT Auditing and Cybersecurity Practices10 minutes

In this section, we explore strategies for building an IT audit career, focusing on essential skills, certifications, and continuous learning for professional growth.