Auditing Security and Controls of Windows® 2000 and Windows® XP Professional

Client computers are the source of more attacks and vulnerabilities than any other computer in the enterprise. However, clients are often left out of the standard audit due to lack of time, money, and resources. If clients are used for attacks or are attacked more than servers and they make up a substantially higher percentage of overall computers on the network, then why are they being neglected in the audits? The answer is simple: Clients don’t house the data and applications, and therefore, they are ignored in lieu of servers being the target of the audit. Auditing Security and Controls of Windows® 2000 and Windows® XP Professional will: - Change your mind on how you perceive clients so you can incorporate them into the audit, making the overall security and stability of the network dramatically increased. - Solve issues regarding security control points, scope of clients, and target goals. - Discuss terminology that can help you perform better interviews to gather information. - Pinpoint where each control point resides for a client. - Illustrate some different tactics for the sampling procedure, which might allow you to streamline the selection and evaluation process. - Lay out a detailed audit plan that will allow you to take the knowledge you learned and put it into action.