Modern IT runs on shared and distributed platforms: virtual machines, containers, cloud services, phones, wireless networks and connected devices. Each changes where data lives, who operates the controls and how quickly things can be created or lost. The auditor does not need to be an engineer in each platform, but must understand the specific risks and who is responsible for managing them, because the same control objectives, such as access, change, logging and data protection, still apply.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.