|
|
 |
System Audit
A security audit provides a comprehensive report on the status
of your security system. There are two types of
audit which can be conducted together or separately.
A security system audit provides an independent review of the
security system and looks for weaknesses against industry best
practice. While a security policy audit ensures that security
policies in use are up-to-date and are being followed.
Why audit your security system?
Security threats change and increase every day. Regular audits will
check that updates are being properly and regularly applied.
An audit provides a baseline of the existing system from which new
investment can be accurately planned, avoiding excessive or inappropriate
expenditure.
A policy audit will check that the security policies which management
has communicated are being adhered to.
System audits will help spot any errors in configuration which can
leave vulnerabilities in the most secure products.
Audits can help overcome 'rule-creep' as small system changes over
time cumulatively produce a significant shift in overall system security.
For more information on security audits feel free to visit:
Georgia Tech's Internal Audit web site
http://www.pro.ro/services/ssa.htm
|