Opleiding: IT Server Security for Audit and Compliance | Foundation

A practical introduction to server security across both Linux and Windows environments, designed for auditors, compliance professionals, and risk practitioners who work with mixed infrastructure. This course brings the two dominant server platforms together in a single program, giving non-administrators the knowledge required to review controls, interpret configuration evidence, and engage effectively with system administrators during audits and compliance reviews. Participants will explore the core concepts of server operating systems and compare how Linux and Windows approach key security domains. Topics include user and group management, authentication and authorization, privileged access through sudo and Active Directory, file system permissions, SSH and remote access, Group Policy and configuration management, patching, logging with syslog, journald, and Windows Event Log, firewall configuration, and hardening benchmarks from CIS and vendor guidance. The course also covers how server controls support frameworks such as SOC 2, ISO 27001, PCI DSS, NIST, and SOX, and how to evaluate consistency across heterogeneous environments. By the end of the course, learners will be able to navigate both Linux and Windows servers at a conceptual level, recognize typical security configurations and weaknesses on each platform, and request and interpret the right evidence during audit fieldwork in mixed environments. Who it's for: Internal and external auditors, GRC professionals, compliance analysts, and risk managers who need a solid grounding in server security across Linux and Windows without a deep technical background. Format: Short, self-paced modules with side-by-side examples, command and screen walkthroughs, and a closing knowledge check.