Krens & Van Rij IT Audit Web Environments 16 mei 2006

16 May 2006IT Audit Web EnvironmentKrens & Van RijIT Audit en Advies16 May 2006, Rotterdam“IT Audit Web Environment”Leen van Rij and Theo KrensICT oA puydrigt hW t e© b E20n0v6ir onment + 3 1 ( 0 ) 2 97 250 465 Krens & Van Rij IT Audit en Advies 1ContentsPart I: Technical Overview• Web environments• J2EE and WebSphere• Security chainPart II: Auditing the Web environment• Control objectives • The Krens-van Rij Method• Summary and conclusionIT Audit Web Environment Krens & Van Rij IT Audit en Advies 2Copyright © Krens & Van Rij IT Audit en Advies116 May 2006IT Audit Web EnvironmentPART ITechnical overviewIT Audit Web Environment Krens & Van Rij IT Audit en Advies 3Traditional environmentBusinessProcessesLegacy Applications SystemsIMS, CICS External SubsystemsDB2 Security& Tools MQ Managerz/OS, AIX, Windows, PlatformsSolaris, HP-UXTCP/IPNetworkIT Audit Web Environment Krens & Van Rij IT Audit en Advies 4Copyright © Krens & Van Rij IT Audit en Advies216 May 2006IT Audit Web EnvironmentTodays Business Requirements• Lower costs by improved productivity, reduced complexity• Short time to market to be and stay competitive• Use of industry standard technologies • Extended reach by using Internet and Web technologies • Highly available, to meet the business needs• Secure, to protect ...