セクション：情報資産の保護
Explanation:
IS監査人の不正検出の責任には、不正の兆候を評価し、
追加措置が必要かどうか、または調査を推奨すべきかどうか。IS監査担当者
組織内の適切な当局に通知するのは、指標が
不正行為の証拠は調査を勧告するのに十分である。通常、IS監査人は、
外部の法律顧問に相談してください。

Section: Information System Acquisition, Development and Implementation

Explanation/Reference:
Explanation:
Audit standards require that an IS auditor gather sufficient and appropriate audit evidence. The auditor has found a potential problem and now needs to determine if this is an isolated incident or a systematic control failure. At this stage it is too preliminary to issue an audit finding and seeking an explanation from management is advisable, but it would be better to gather additional evidence to properly evaluate the seriousness of the situation. A backup failure, which has not been established at this point, will be serious if it involves critical datA. However, the issue is not the importance of the data on the server, where a problem has been detected, but whether a systematic control failure that impacts other servers exists.

鑑識データ収集においてイメージングを用いる最大の利点は、破損したファイルも含め、元のデータのビット単位のコピーを提供できることであり、元の証拠を改変することなく、徹底的な分析のためにストレージメディアの正確な複製を確保できる点にある。

Section: Protection of Information Assets
Explanation:
ipchains is a free software based firewall running on earlier Linux. It is a rewrite of ipfwadm but is
superseded by iptables in Linux 2.4 and above. Iptables controls the packet filtering and NAT components
within the Linux kernel. It is based on Netfilter, a framework which provides a set of hooks within the Linux
kernel for intercepting and manipulating network packets.