What an audit covers
Inventory
Workstations, servers, network, applications, accounts and cloud services: a map of what really exists.
Configuration and patches
Systems up to date, unneeded services disabled, security settings applied.
Access and authentication
Password policy, two-factor authentication, orphan accounts, excessive rights.
Backups
Frequency, isolation, encryption and above all restore testing.
Network and exposure
What is visible from the Internet, segmentation, Wi-Fi, remote access.
Practices and organisation
Awareness, onboarding and offboarding procedures, incident handling.
How an audit unfolds
- 1
Scoping
Interview, perimeter, required access, schedule.
- 2
Data gathering
Inventory and technical readings, often remote.
- 3
Analysis
Identifying and ranking risks.
- 4
Debrief
Written report and a debrief meeting with explanations.
What you receive
- A readable report with an executive summary and technical details for IT.
- A ranked risk list by severity and ease of fix.
- An action plan estimated in effort, quick wins first.
- Concrete recommendations, applicable by your teams or by us.
An audit answers « where are my weaknesses? ». To check whether they are exploitable, a penetration test is the natural complement. See also our guide audit or pentest: what is the difference?
