Overview

A security audit is the formal examination and assessment of an organisation’s information security posture, against its own policies, regulations and standards.

Scope

What an audit does for you

Checks proper use

Confirms that your information systems are being used as intended.
Measures your controls

Shows how effective your existing security controls really are.
Validates compliance

Tests compliance with your security policies, procedures and guidelines.
Drives improvement

Helps you design improvements and starts a process of continual improvement, based on properly recorded data that is reviewed regularly.

In practice

The ITnIS approach

Our audits start from your business and your specific security needs. We monitor compliance with the relevant standards and best practice, and go further than generic checklists.

That includes measuring how effective your information security initiatives are and whether they meet the objectives you set for them, which goes beyond what established standards such as ISO/IEC 27000 require on their own.

Projects