IT Infrastructure and Cloud Basics
Learn the fundamentals of IT infrastructure and cloud computing. This course introduces servers, networks, and cloud service models while highlighting key security, compliance, and audit considerations.
Course Description
Course 3 of 9 in our IT Auditing Learning Path! IT Infrastructure and Cloud Basics provides a practical introduction to the technology that underpins today’s organizations. You’ll explore the core components of IT environments—servers, networks, storage, and facilities—before diving into cloud computing, including deployment models (public, private, hybrid) and service models (IaaS, PaaS, SaaS). The course emphasizes the shared responsibility model, security fundamentals such as IAM, encryption, and monitoring, and how controls shift between on-premise and cloud environments.
Designed for professionals seeking a foundational understanding, the course also introduces audit implications, real-world case studies, and hands-on demonstrations using AWS. By the end, learners will be able to recognize risks, evaluate controls, and confidently navigate conversations about IT and cloud in an audit or compliance context.
This course covers topics that align with concepts addressed in Domain 2 of the Certified Information Systems Auditor (CISA®) exam framework. It is not affiliated with, endorsed by, or sponsored by ISACA®, nor does it guarantee exam preparation or certification outcomes.
In this course, you'll learn...
Course Objectives
To identify and explain the core components of IT infrastructure including servers, databases, and networks.
To distinguish between cloud service models (IaaS, PaaS, SaaS) and understand their respective risk implications.
To describe the roles of major cloud providers and interpret the Shared Responsibility Model.
To recognize common cloud configurations and security controls relevant to IT audits.
To understand Identity & Access Management (IAM), logging practices, and encryption controls within a cloud environment.
To differentiate between the audit approaches for on-premise vs. cloud infrastructure.
How you'll apply these skills...
Understand Core Infrastructure: Recognize how servers, networks, databases, and storage interact to support business processes and identify where risks can arise.
Evaluate Cloud Environments: Apply the shared responsibility model to distinguish which security and compliance controls belong to the provider versus the customer.
Assess Security Controls: Review configurations for IAM, encryption, and logging/monitoring to confirm data and systems are properly protected.
Analyze Cloud Service Models: Compare IaaS, PaaS, and SaaS environments to spot shifts in risk and responsibility across different deployment approaches.
Interpret Network Diagrams: Use visual infrastructure maps to trace data flows, pinpoint control points, and identify potential vulnerabilities.
Audit with Confidence: Translate technical configurations into audit evidence by testing settings, collecting logs, and validating that controls are functioning as designed.
Bridge IT and Audit Teams: Communicate technology concepts in clear, business-focused language to strengthen collaboration during audits and compliance reviews.
Course Instructor
Michael Carroll, CPA, CISA, CISM
Michael is an accounting and information security professional. He is also an Adjunct Professor at several higher education institutions, where he is responsible for teaching various accounting and information technology courses.
Michael earned his MBA in Accounting and B.S. in Accounting / Accounting Information Systems from Canisius University. Additionally, Michael is a Certified Public Accountant (CPA) and a Certified Information Systems Security Professional (CISSP). Michael is a current member of the NYCPA’s Education Committee and has been an Advisory Board Member for the Academy of Finance (AOF) since 2020.
Michael enjoys traveling, hiking, and watching the Buffalo Bills. He has also participated in several marathon events.
Course Content
Additional Info
Format
5-20 min. videos, 2 quizzes, and a final assessment
Field of study
Information Technology
CPE Credits
CPEs 3.0
Prerequisites
None