If you were asked to independantly review the design and implementation of a new active directory, what specific areas would you focus on from a risk perspective? Could you provide perhaps the more critical checks, or a top 10 essentials, and how youd
go about testing them. This can be from a hands on testing perspective, or to a request for evidence of testing performed by the implementation team.
↧