Global systems and Network Auditor

Global Systems and Network Auditors (GSNAs) have the knowledge, skills and abilities to apply basic risk analysis techniques and to conduct a technical audit of essential information systems.

Target

Technical staff responsible for securing and auditing information systems; auditors who wish to demonstrate technical knowledge of the systems they are responsible for auditing.

The topic areas for each exam part follow:

1. Auditing Concepts & Methodology: The candidate will knowledge of basic auditing terms and concepts and demonstrate familiarity with the audit process, baselines, time based security concepts, and how risk assessment are used to identify and specify controls.
2. Auditing Networking Devices & Services: The candidate will demonstrate the ability to audit common network devices and services, including: routers, switches, wireless infrastructure, virtualized services, containerized applications, VoIP, mail, DNS, and remote access services.
3. Auditing Unix Systems: The candidate will demonstrate the ability to audit Unix systems using common techniques, tools and scripting commands to determine process information, access controls, and system configurations.
4. Auditing Windows Systems: The candidate will demonstrate the ability to audit Windows systems using common techniques, tools, and scripting commands to determine process information, access controls, and system configurations.
5. Web Application Security: The candidate will demonstrate the ability to audit web applications, including their configuration, authentication, session management, data security at rest and in transit, and vulnerabilities to common attacks.