The Comprehensive Audit

The Managed Service Audit will check for best practices in areas such as:

• Public and Private facing Networks, Domains, and Websites
• Servers, Equipment, Endpoints, and Applications
• Identity Management Providers (IDP) and User Access Management (IAM)
• Cloud Service Providers, Productivity, and Email Systems
• Vendor Services Provided and their Cost-Effectiveness
• Business Sector Regulatory Compliance Adherence
• Resiliency against a light, Simulated Penetration Test
• Security Controls and Written Information Security Policy (WISP)

During the discovery and audit process, we compare your infrastructure to lists of must-have security controls and verify the use of modern, scalable, and reliable solutions within your business.

The Aduit is not a traditional, complete risk assessment, but it touches on many of the points that are identified by a typical organizational risk assessment. We zero in on factors such as IT solution cost effectiveness, deficiencies in company operations and information security, and other key systems administration points we refer to as "Industry Best Practices".

This Audit has been developed based on various regulatory bodies’ recommendations and security frameworks - including CIS (Center for Internet Security), NIST (National Institute of Standards and Technology), ISO (International Standards Organization), PCI, HIPAA, and many others.

The scope, level of detail, and resolution of this audit are tailored to fit the specific industry and ultimately to meet the modern benchmarks and standards in information security. The standards to meet may vary slightly, based on client infrastructure and the kind of services the client provides. For example, clients in the healthcare, financial or government industries, there are several compliance policies required to adhere to which may not apply to a manufacturing or services business and vice-versa.

The audit is required in order for us to successfully implement our managed IT services. Every client is different, so performing an audit makes sure that you aren’t getting a cookie-cutter solution from us, but rather a tailored, white-glove experience.

• Establish an Inventory of Service Providers / Management Policy / BAA's
• High-Value Target Objectives and Disaster Recovery Process
• Incident Response Procedures
• Employee Training and Skills Policy
• Acceptable usage of corporate assets policy
• Change Management and Configuration Process
• Ongoing Vulnerability Management Processes
• Employee Onboard/Offboarding Procedure
• Employee/Contractor BYOD and remote work policy
• Third-Party Annual Risk Assessment

Privacy Policy · Privacy Settings · Sitemap