When assessing the design of network monitoring controls, an IS auditor should FIRST review
network:

A.
topology diagrams.

B.
bandwidth usage.

C.
traffic analysis reports.

D.
bottleneck locations.

Explanation:

The first step in assessing network monitoring controls should be the review of the adequacy of
network documentation, specifically topology diagrams. If this information is not up to date, then
monitoring processes and the ability to diagnose problems will not be effective.