The aim of the audit is the explore the risks that might jeopardize the secure and safe operation of the organization and the deficiences that arise during the operation of a security system developed and installed earlier. Following the audit we point out the risks to manage. Out of an array of defence mechanisms to diminish risk we will recommend the one that seems most efficient in the particular situation and proportionate to the risk.
If an organization has already got their own IT security regulatory system in effect, the system needs to be operated according to the instructions with due care, professionalism and precision and with regular inspections carried out. Any changes in the IT environment need to be considered and the regulatory system modified accordingly. These inspections and minor modifications are also carried out within the framework of the IT Security Audit.