System Intrusion Audit Work Program

The objective of this audit work program is to evaluate a business's ability to detect unauthorized system access attempts.

IDS sensors are appropriately placed throughout the company’s network to detect unauthorized access attempts; IDS sensors are configured to analyze all network protocols in place, including upper-level application protocols, with sufficient detail; appropriate oversight and authority are provided to manage the IDS sensors; IT security receives intrusion detect alerts and responds within a specified period of time; and IT security determines that intrusion detection system updates are authentic before they apply them.