- 2074 Bhadra · 4+4 marks
Security audit and security protocols
Short answer
A security audit reviews policies and controls to identify vulnerabilities, verify compliance, and recommend improvements, building trust and ensuring system integrity. Essential protocols include SSL/TLS for encrypted web traffic, IPsec for VPNs, SSH for secure remote access, Kerberos for authentication, and WPA3 for wireless security.
Describe the role of security audit for information system. What are the necessary protocols to ensure the stringent security for modern information system?
Role of security audit
A security audit is a systematic, independent review of an information system's security policies, controls, configuration and practices against a standard (e.g. ISO 27001) to check that they are adequate and working.
Roles:
- Identify vulnerabilities and weak controls before attackers exploit them.
- Verify compliance with laws, policies and standards.
- Assess risk and recommend corrective actions with priorities.
- Check access control, user privileges, logs and backup procedures.
- Detect fraud and misuse by reviewing audit trails.
- Confirm integrity and availability of data and systems.
- Build management and customer trust, and support continuous improvement.
- Test incident response and disaster recovery readiness.
Protocols for strong security
| Protocol | Purpose |
|---|---|
| SSL/TLS | Encrypts web traffic between client and server |
| HTTPS | HTTP over TLS for secure browsing |
| IPsec | Secures IP packets; used in VPN |
| SSH | Secure remote login and file transfer |
| SFTP / FTPS | Secure file transfer |
| Kerberos | Ticket-based network authentication |
| S/MIME, PGP | Secure email |
| WPA2/WPA3 | Wireless security |
| SET / 3-D Secure | Secure card payments |
| RADIUS / LDAP | Centralised authentication and directory services |
Combined with firewalls, multi-factor authentication, strong encryption and regular patching, these protocols provide stringent security.
✓ Answer checked by Claude Opus 5.5 (high effort)
Related questions
- Information audit and its benefits · Information System, chapter 2
- IS audit and CAATs · Information System, chapter 2
- Strategic information system and benefits · Information System, chapter 1 · asked 2×
- Geographic Information System · Information System, chapter 1
- Short note: HR information system · Information System, chapter 6
- Threats, controls and security measures · Information System, chapter 2 · asked 3×
- Email security with diagram and protocols · Internet and Intranet, chapter 3
- Role of electrical energy in modern society · Utilization of Electrical Energy, chapter 1
- Short note: information security model · Operating System, chapter 8
- LTI system and closed loop in modern systems · Control Systems, chapter 1