Posted by Anders Thulin on Dec 05
An audit is intended to answer the question: does the examined system workaccording to the rules and regulations it should follow? The next question is,
obviously, are there any such rules?
That should be answered by the organization owning or otherwise managing
the proxy: what rules should be followed? These will typically relate to the
management of the proxy: how is access controlled, how are changes implemented,
how are logs and backups...