An IT audit assesses an organisation’s current information security posture in terms of protecting information assets.
SMART CERTIFICATION team of experts analyses
- Physical and logical protection of information and information and communication technologies
- Management and access levels
- Information security policies;
- Business continuity assurance;
- Incident and emergency response.
The main objectives of the IT audit are:
- Identify weaknesses and vulnerabilities in information systems
- Assess whether the existing infrastructure can meet the organisation’s needs in a reliable, uninterrupted and sufficiently redundant manner to minimise the risk of damage, loss and theft of information resources and data;
- Determine whether information systems comply with best practices in the field and with applicable regulatory and other requirements – the Cybersecurity Act, the Regulation on Minimum Requirements for Network and Information Security, the ISO/IEC 27000 series of standards;
- Determine the effectiveness of IT services;
- assess the competence of IT personnel to perform their information security duties.
The IT audit concludes with the preparation of a report containing the findings and security analyses of the individual systems. SMART CERTIFICATION team of experts also identifies recommendations for improving security and optimising the IT environment.