> I've been looking fruitlessly on the net for system auditing
> documents -- not necessarily a checklist, but how an audit of a network
> / system would be performed. This would include, for example, physical
> security, OS security, personnel security, social engineering and more.
> Would anyone know where to find any information on auditing ?
Not on the net. But Microsoft Press has a book entitled "Microsoft
Windows NT 3.5 Guidelines for Security, Audit and Control", ISBN