SAS 70

From: p1g <killfactory@xxxxxxxxx>
Date: Fri, 27 Jul 2007 10:42:55 -0400

Hi,

Can anyone provide me with some pointers on SAS 70 auditing?

I am interested in the technical controls that would be assessed by
this type of audit.

Type II is possible.

I will on the receiving end of such an audit in the near future and I
would like to go ahead and assess my stuation before hand.

Thanks peeps,

-p1g

--
-p1g
SnortCP
,,__
o" )~ oink oink
' ' ' '

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Follow-Ups:
- Re: SAS 70
  - From: Paul Melson

Prev by Date: Cross testing exploit with vulnerability scan results
Next by Date: Re: server port hardening assessment
Previous by thread: Cross testing exploit with vulnerability scan results
Next by thread: Re: SAS 70
Index(es):
- Date
- Thread

Relevant Pages

Re: Autoexec.nt file missing?
... you can't enable Auditing on a computer running Home Edition. ... You must specify what to audit. ... example, a file, folder, registry key, printer, and so forth-that has its ...
(microsoft.public.windowsxp.newusers)
Re: auditing
... Enable auditing of account management will log the creation and changes to ... You can audit Directory Service access to audit OU's. ... This security setting determines whether to audit each event of account ... For specific instructions about how to configure auditing policy settings, ...
(microsoft.public.win2000.active_directory)
Re: Autoexec.nt file missing?
... you can't enable Auditing on a computer running Home Edition. ... You must specify what to audit. ... > example, a file, folder, registry key, printer, and so forth-that has its ...
(microsoft.public.windowsxp.newusers)
Re: Auditing Privilege Use - failure only but still get Success
... Success only (applies to remote access, ... Audit account management: No Auditing ... Audit privilege use: No Auditing ...
(microsoft.public.win2000.group_policy)
RE: Capture Logins
... Auditing with Windows Server 2003 and XP is configured in several different ... auditing through the audit policy, which will usually begin the audit ... Reports changes to user accounts. ... Audit Policy Change: ...
(microsoft.public.windows.server.general)