Opleiding: Foundation Windows Server Security Controls: Audit & Compliance

A practical introduction to Windows Server security for auditors, compliance professionals, and risk practitioners who need to evaluate Microsoft server environments with confidence. This course provides the knowledge required to review controls, interpret configuration evidence, and engage effectively with system administrators during audits and compliance reviews. Participants will explore core Windows Server concepts including Active Directory, domains, organizational units, user and group management, and Group Policy Objects (GPOs). The course covers key security topics such as authentication and authorization, privileged access, password and account policies, patching with WSUS, event logging, PowerShell auditing, BitLocker, Windows Firewall, and hardening benchmarks from CIS and Microsoft.
Learners will also see how these controls map to frameworks including SOC 2, ISO 27001, PCI DSS, NIST, and SOX. By the end of the course, participants will be able to navigate a Windows Server environment at a conceptual level, understand typical security configurations, identify common weaknesses, and request and interpret the right evidence during audit fieldwork. Who it's for: Internal and external auditors, GRC professionals, compliance analysts, and risk managers who need a solid grounding in Windows Server security without a deep technical background. Format: Short, self-paced modules with practical examples, annotated screenshots, and a closing knowledge check.