CompTIA® Security+™: Study Guide, Fifth Edition

Auditing

An excellent security principle for you to follow to protect your assets is to lock everything down and then watch them as if they were not locked down. If you secure every asset to the best of your abilities, using your available technologies and your available budget, and then watch for the inevitable breach or attempt to breach, you make your deployed security even better. Locking down an asset and then walking away doesn’t mean it won’t be attacked; it just means you won’t know when it is attacked. And you won’t know an attack was successful until you return and notice damage or loss. All too often, administrators fail to look at logs until something goes wrong.

You should consider auditing, monitoring, logging, and watching all ...