Network Security and Infrastructure Auditing

3.5 CPEInformation Technology

Learn how to evaluate and test network security and IT infrastructure from an auditor’s perspective. This course covers network architectures, Infrastructure as Code (IaC), vulnerability scanning, and penetration testing, equipping you with the skills to identify risks and ensure organizations maintain secure and compliant environments.

VIDEO COURSE

Included with any paid Wisdify plan

Choose a plan to enroll and earn CPE.

View plans Already enrolled? Sign in to continue

About this course

Course 5 of 9 in our IT Auditing Learning Path! Organizations today rely on complex networks, hybrid cloud setups, and automated infrastructure, all of which create both opportunities and risks. Network Security and Infrastructure Auditing equips auditors and IT professionals with the skills to evaluate these environments for security, compliance, and risk exposure.

The course provides practical guidance on reviewing network components such as firewalls, VLANs, and VPCs, as well as modern practices like Infrastructure as Code (IaC). It also explains how to assess vulnerability scans and penetration testing reports, ensuring that findings are properly understood and communicated to stakeholders.

By focusing on real-world practices and modern IT environments, this course prepares you to perform thorough and effective audits of network security and infrastructure.

This course covers topics that align with concepts addressed in Domain 5 of the Certified Information Systems Auditor (CISA®) exam framework. It is not affiliated with, endorsed by, or sponsored by ISACA®, nor does it guarantee exam preparation or certification outcomes.

What you’ll learn

Upon completion of this course, you will be able to:

To explain the role of infrastructure and network security controls within an IT audit.
To identify and assess common components of network architecture (e.g., firewalls, VLANs, VPCs, etc.) from an auditor’s perspective.
To understand how organizations configure and secure common network devices to prevent unauthorized access and mitigate common threats.
To evaluate the risks and control implications of Infrastructure as Code (IaC).
To interpret results from vulnerability scans and penetration tests, and understand how they tie into audit reporting.
To apply practical audit techniques to review network and infrastructure security configurations.

Your instructor

Michael Carroll, CPA, CISA, CISM

Course content

4 lessons · 20 steps · 1h 16m of video

01LESSON 1Auditing Network Security Controls6 items

02LESSON 2Infrastructure as Code (IaC)5 items

03LESSON 3Vulnerability Scanning and Penetration Testing7 items

04LESSON 4Conclusion1 item

Locked

Final assessment

Course access is required to take this assessment.

30 questions70% to passUnlimited attempts

On course completion: 3.5 CPE and a certificate

Course details

CPE: 3.5
Field of study: Information Technology
Course level: Not specified
Delivery method: QAS™ Self Study
Prerequisites: Completion of prior courses in <a href="https://wisdify.com/it-auditing-learning-path-cpe-courses/">Wisdify’s IT Audit Learning Path</a> is recommended.
Advance preparation: Not specified
Course content: 4 lessons · 20 steps
Assessment: Final assessment · 30 questions · pass 70%
Completion deadline: 365 days from enrollment
Last updated: January 2026
Registration: A Wisdify account, eligible subscription, and course enrollment are required.