When evaluating the design of controls related to network monitoring, which of the following is MOST important for an IS auditor to review?

When evaluating the design of controls related to network monitoring, which of the following is MOST important for an IS auditor to review?
A . Incident monitoring togs
B . The ISP service level agreement
C . Reports of network traffic analysis
D . Network topology diagrams

View Answer

Answer: D

Explanation:

Network topology diagrams are the most important for an IS auditor to review when evaluating the design of controls related to network monitoring, because they show how the network components are connected and configured, and what security measures are in place to protect the network from unauthorized access or attacks. Incident monitoring logs, the ISP service level agreement, and reports of network traffic analysis are useful for evaluating the effectiveness and performance of network monitoring, but not the design of controls.

References: CISA Review Manual (Digital Version), Chapter 5, Section 5.3.3