Audit of IT General Controls
Description
At present, branch routers rely on shared local passwords administered informally among network staff. This approach creates multiple risk vectors: lack of accountability (no way to attribute configuration changes to specific admins), stale credentials that remain valid after staff departures, and non-compliance with regulatory frameworks such as ISO 27001 and SOX ITGC requirements. To address these gaps, senior management has mandated a migration to centralized AAA (Authentication, Authorization, and Accounting). The goal is to enforce identity-based access, provide a tamper-resistant audit trail of all logins and configuration changes, and implement a least privilege model. R2 will be integrated with a TACACS+ server (192.168.2.2) for granular command authorization and full-payload logging, while R3 will leverage a RADIUS server (192.168.3.2) suitable for scalable user authentication. Students are tasked with staging and validating this migration in a lab environment. They must configure local fallback accounts (Admin2 on R2, Admin3 on R3) to guarantee business continuity if AAA servers become unreachable. The exercise includes connectivity verification (ICMP reachability), AAA new-model enablement, group definition, console/VTY method list application, and functional testing with valid, invalid, and fallback credentials. Finally, students will trigger failed logins, pull logs from TACACS+ and RADIUS servers, and perform a comparative analysis of log fidelity and forensic usefulness. Deliverables include configuration snippets, test evidence, and a formal recommendation report for NetBank’s CISO.
Files
Steps to reproduce
# IT General Controls & AAA Laboratory — Dataset This package contains router configuration examples, AAA server settings, and synthetic log data to replicate the **IT General Controls auditing** lab for NetBank Ltd. ## Contents - `data/`: Sample AAA server logs (TACACS+ and RADIUS) with both successful and failed login attempts. - `scripts/`: Cisco IOS configuration snippets for R2 (TACACS+) and R3 (RADIUS), including fallback users. - `results/`: Templates for students to document tests, login outcomes, and audit evidence. - `docs/`: Lab description and guiding questions (Markdown). ## Learning Outcomes - Understand AAA migration from local passwords to centralized TACACS+/RADIUS. - Learn to configure fallback accounts for continuity. - Evaluate audit log detail differences between TACACS+ and RADIUS. - Propose recommendations to improve security and compliance. ## License CC BY 4.0 for data and documentation, MIT for configuration templates.
Institutions
- Universidad Cooperativa de Colombia