Linux often proves to be a challenging platform to audit given the lack of exposure most have to the desktop side of the operating system, but with Linux playing an increasingly critical role in server and cloud technology, auditors need to be equipped to understand and assess risk on the platform. This presentation will walk auditors through an introduction to Linux, demonstrate through VirtualMachines an actual assessment of key security controls, and engage the audience to discuss common perceptions and challenges in assessing the platform.