Security Audits
Assess controls.
What Is a Security Audit
A security audit is a systematic assessment of how well an organization meets its security controls and policies. It compares the actual state against a defined standard and documents the gaps.
Audits assess controls; they do not, by themselves, fix problems.
Audit vs Pen Test vs Assessment
These terms overlap but differ:
- Audit: checks controls against a standard, with evidence.
- Penetration test: actively exploits weaknesses to prove impact.
- Risk assessment: estimates likelihood and impact of threats.