Section 2.12 Accounting

Question 1

Accounting

Section 2: Fundamentals of security

Answer 1

Security measure that tracks and records all user communication and transactions

Question 2

5 main reasons

Why is accounting important?

ARFRU

Section 2: Fundamentals of security

Answer 2

1. Audit trail: Chronological order of activities that can be analysed
2. Regulatory compliance: comprehensive records
3. Foresic analsyis: Uses detailed accounting and event logs that can help cyber security analysts with investigations
4. Resource optimisation: Organisations can optimise system peformance and minimise costs by tracking resouce utilisation and allocation desicions
5. User accountability: Ensure user actions are monitored and logged deterring misuse.

Question 3

3 technologies used

How to peform accounting?

Section 2: Fundamentals of security

Answer 3

1. Syslog servers: used to aggregate logs from various network devices and systems
2. Network analysis tools: capture and analyse network traffic. Helps to analyse the data moving in/out of a network
3. SIEM tools: Real time analysis of security alerts generated by various hardware and software in an organisation