Auditing the SNA/SNI environment

Auditing complex SNA networks is a scarcely explored area, confronting the reviewers with a number of distinct, though related questions such as: what are the measures for security and internal control integrated in the networks, what are their strengths and weaknesses, how can one verify their effectiveness, and how are the measures impacted by interconnecting networks? From an EDP-auditor's point of view, this paper discusses SNA and interconnected SNA networks, associates the internal control and security measures to hardware and software components, and provides recommendations for auditing the SNA/SNI environment in its entirety.