The purpose of a security audit is to test a company's infrastructure and its vulnerability to attacks. These tests are performed digitally - as a search for security vulnerabilities as well as in the form of human resource tests.
Following the tests, an audit report is produced and there is a possibility for ITH to implement the recommendations made therein.
verification of your organisation's documentation, diagrams and security policies and procedures
a description of all activities carried out, including recommendations for improving IT security policies
reports of vulnerability scans together with a risk assessment of the threats as well as the identification of recommendations for their elimination
A standard audit does not include penetration testing of operating systems, web-application testing, checking the legality of software, social engineering attacks as well as attacks to check physical access to your company's resources.