This section covers the basic information and terms that an auditor like you should be familiar with. This will help you plan your activities and understand the output expected of them. Governance frameworks and industry standards help you baseline a scope and what to look for during the audit. Standards, controls, procedures, policies, and risk assessment all play an important role in network auditing as most organizations need to comply with the industrial standards and regulations. Without a risk assessment, none of the audits would be complete. Network audits are no different. Hence, these are some of the topics we will cover here.

Understanding the types of audits

Network audits can be classified into three types – review, assessment, and audit – depending on what the audit's scope is and the organization's requirements and standards, as per the regulatory and compliance mandates. Let's take a closer look at...