IT Audit & Compliance

How to audit applications: input, processing and output controls, access, change management and security testing, with key audit checks.

How to audit WLAN and mobile devices: wireless security settings, encryption, rogue access points, MDM and mobile device policies.

How to audit virtualized environments: hypervisor hardening, VM sprawl, access control, patching and backups for virtual infrastructure.

How to audit storage systems: SAN, NAS and backup security, access control, encryption, capacity and data retention checks.

How to audit databases: access control, privileged accounts, patching, encryption, logging and backup checks for secure, compliant databases.

How to audit web servers and web applications: configuration, patching, authentication, input validation and logging checks.

How to audit Unix and Linux systems: accounts, permissions, SSH, services, patching and logging, with practical commands and checks.

How to audit Windows operating systems: accounts, group policy, patching, services, audit logging and endpoint protection checks.

How to audit routers, switches and firewalls: configuration reviews, access control, firmware, logging and firewall rule-base checks.

How to audit data centers and disaster recovery: physical security, environmental controls, backups, DR plans and recovery testing.