IT AUDIT RUNBOOK for Oracle Cloud Infrastructure (OCI) Tenancy & Operating System Level Audit
Purpose & Scope Purpose This runbook provides a structured, repeatable procedure for conducting an IT infrastructure audit of an Oracle Cloud Infrastructure (OCI) tenancy and all associated operating systems (Linux and Windows). The audit evaluates the security posture, access controls, configuration hygiene, compliance readiness, and operational governance of the cloud environment. NOTE : This runbook is an outline only, it may not be suitable for all OCI Tenancy or Operating Systems. The auditor may need to improvise based on the tenancy structure, level of access given etc. Scope The following areas are within scope of this audit: • OCI Tenancy-Level: IAM (users, groups, policies, federation), compartment hierarchy, networking (VCN, subnets, security lists, NSGs, DRG, VPN/FastConnect), compute instances, block/object/file storage, key management (Vault), logging, monitoring, audit trail, cost governance, and tagging. • ...