Unit 3: Audit Mechanisms Activity

Question 1

In what way could a virtual machine image be useful for audit purposes?

Answer 1

A virtual machine image could be built to as specified configuration. This configuration and the logs of the build process then provide evidence that all instance of this virtual machine will implement adequate controls.

Question 2

Name two reasons for conducting audits

Answer 2

1. When they are required by regulatory or compliance reasons
2. As part of a quality system
3. As a demonstration of quality