GTAG 6 Managing and Auditing IT Vulnerabilities

《GTAG 6 Managing and Auditing IT Vulnerabilities》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、®IPPF–PracticeGuideManagingandAuditingITVulnerabilitiesGlobalTechnologyAuditGuide(GTAG)6:ManagingandAuditingITVulnerabilitiesAuthors:SashaRomanosky,HeinzSchoolofPublicPolicyandManagement,CarnegieMellonUniversityGeneKim,TripwireInc.andITProcessInstituteBridgetKravchenko

2、,GeneralMotorsCorp.October2006Copyright©2006byTheInstituteofInternalAuditors,247MaitlandAvenue,AltamonteSprings,Florida32701-4201.Allrightsreserved.PrintedintheUnitedStatesofAmerica.Nopartofthispublicationmaybereproduced,storedinaretrievalsystem,ortransmittedinanyformb

3、yanymeans—electronic,mechanical,photocopying,recording,orotherwise—withoutpriorwrittenpermissionofthepublisher.TheIIApublishesthisdocumentforinformationalandeducationalpurposes.Thisdocumentisintendedtoprovideinformation,butisnotasubstituteforlegaloraccountingadvice.The

4、IIAdoesnotprovidesuchadviceandmakesnowarrantyastoanylegaloraccountingresultsthroughitspublicationofthisdocument.Whenlegaloraccountingissuesarise,professionalassistanceshouldbesoughtandretained.GTAG—TableofContents1ExecutiveSummaryfortheChiefAuditExecutive..............

5、.........................................................................................................................................................12Introduction......................................................................................................

6、........................................................................................22.1IdentifyingPoorVulnerabilityManagement....................................................................................................................................22.2Imp

7、rovingVulnerabilityManagement..............................................................................................................................................22.3TheInternalAuditor’sRole......................................................................

8、........................................................................................22.4HowVulnerabilityManagemen