Auditing

Operating
System and
Network

Operatin
g
System
is the

computers
control
program.

Operating system
security
involves policies and controls that
determine
who can access
which resources
what action they can take

4
Security
Components

Log-on Procedure

Access token
contains key
information
user ID and
password
privileges
granted to the
user.

ACCESS CONTROL LIST

Contained in
When a
System compares the access
user
privileges
token with
attempt to
those
access a
contained in
resource
ACCESS
CONTROL

DISCRETIONARY ACCESS
PRIVILEGE
Controller
of
General
Ledger

Manager of
Budgeting
Department
Read only
privilege
Accounts Payable
Manager
Both read and
write privileges

4
Operating
System

Access Privilege

Access Privileges = Assigned Duties

Password
Control

Quality of Security = Quality of

Virus Control

System Audit Trail

are logs that record
activity at the system.

Keystroke
Monitoring
records both
the users
keystroke
and the
systems
response.

EVENT MONITORING