1) You are an IT auditor working for $15 million sales per year speciality chocolate candy manufacturer. The company is planning to engage in e-commerce over the Internet. What would be your five biggest concerns regarding risk and why?
2) Mr. Joey Ramone is the CFO of a company which manufactures parts for the four largest auto producers in the U.S. Mr. Ramone believes that the likelihood of a disaster impacting his business is very remote. Given competitive pressures and slim margins in his business, he does not want to spend money or devote the resources to develop and maintain a BCP/DRP. How would you make the case that a BCP/DRP is needed?
3) What are the similarities and differences in the way you would go about performing an IT audit of Vista/Windows 7 and UNIX/Linux?
4) Briefly describe what you would consider to be the top five vulnerabilities of Vista/Windows 7.