The course of an infrastructure and systems security audit includes the following steps:
- taking stock of network and system resources, i.e. checking the completeness of software and hardware necessary to guarantee the foundations of data security;
- checking the level of protection of the processed and stored data;
- assessment of reliability of the tested structures.
The essence of conducting a security audit is primarily to identify hardware or system deficiencies and to detect potential threats arising from these deficiencies, and consequently to comprehensively secure IT systems against incidents and to develop procedures to be used in the event of their occurrence.