IT audit
A sound assessment of your resources
An independent IT audit reveals the real state of your infrastructure: its strengths, weaknesses, risks and opportunities for improvement and scaling. We carry out a full review of hardware, software, networks, security, processes and non-conformities, and prepare a detailed report with prioritised recommendations and a roadmap for improvement. An audit can form part of preparing for certification or due diligence, be a regular practice ahead of your busiest periods of the year, or serve as a monthly check-up.
We inspect hardware and networks, assessing servers, network equipment, cable routes and connectivity. We audit software and data, taking an inventory of licences and checking that systems are up to date and backup procedures are in place. We review cyber security, checking firewalls, access rights and malware protection. Our specialists also inspect the physical environment of your server rooms: power supply, air conditioning, video surveillance and access control. You get a clear picture and concrete steps to make your operations more reliable, secure and efficient.
The assessment of resources you need is called an infrastructure audit. Everything that currently exists in your organisation (devices, network, processes, logistics) can be analysed and evaluated, and the assessment usually comes with recommendations for optimisation and greater efficiency.
Why it matters
An independent view
The real state of your infrastructure: strengths, weaknesses, risks and opportunities to improve and scale.
A full review
Hardware, software, networks, security, processes and non-conformities.
Prioritised recommendations
A detailed report with prioritised recommendations and a roadmap for improvement.
Physical environment
Power supply, air conditioning, video surveillance and access control for server rooms.
What is an IT audit for?
First, to assess your existing assets, procedures and policies and how they interact. Next, we check whether the IT infrastructure meets the needs of the business and can support every process in the organisation without failing under varying loads. We establish how well risks are managed and kept to a minimum, so that no larger, systemic problem can arise. And of course we look at the cost of your equipment, which, as everyone knows, often needs renewing, upgrading or replacing outright when it no longer meets your business needs.
What are the phases of an IT audit?
Fieldwork
- Assessing how effective the organisation's information security controls are
- Assessing communications and network security
- Assessing service providers
- Assessing the applications the organisation uses and their licence compliance
- Assessing database security
- Assessing servers and the services they provide
- Analysing the security mechanisms used on endpoints and individual workstations
- Scanning internet-facing systems and applications for vulnerabilities and potential threats to information security
Reporting
The information security audit ends with the preparation and handover of a comprehensive report covering every analysis carried out during the audit. The final report identifies weaknesses and the risks that arise from them, and sets out in detail the conclusions of the security audits of each system.
Recommendations
Alongside the report, we set out recommendations for improving security and optimising your information environment to make your working environment more efficient.
Penetration testing
The level of security is assessed through penetration testing. Our tests can be delivered as part of an IT audit report, or as part of an ongoing security review programme driven by regulatory and standards requirements such as ISO 27001, PCI-DSS or GDPR.
