IT Security Audit
Regular Checks to Protect Your Assets
1 Kick-off
In a kick-off meeting preceding the actual audit, we work with you to define in detail the procedure, schedule, and contact persons for the audit project.
2 Examining Your Documentation
The next step is for us to review the documents you have provided, including, inter alia, user manuals, responsibilities, and operational concepts.
3 Interviews
Interviews with contact persons from different groups (e.g. development, end users etc.) clarify questions regarding organisational implementation and technical conception.
4 On-Site Audit
We use on-site inspections to spot-check whether the processes described in your documentation are also used in practice.
5 Audit Report
The audit report summarises our results , evaluates the risk of the identified vulnerabilities and provides measures for immediate and medium-term improvement.
6 Final Presentation
A final presentation supplementing the report provides a summary of our findings alongside adequate measures to optimise your strategy.
Combining Security Audit and Usability Test
In many cases, it can be useful to evaluate the implementation of security controls in the context of usability, e.g. when controls implemented in online applications may confront users with difficulties. Often, however, usability concepts tailored to the target group can compensate a lot of these difficulties.
This is why plan42 also offers a combination of security audit and usability test to develop strategies that enable you to increase user acceptance - without impairing security. Our case study on IT security vs. usability gives you an idea of what such strategies can look like.
And what can we do for you?
Would you like to learn more about our IT security audits? Please feel free to contact us.