Audit is the review of organisational process against the defined/required standards
Areas of focus will include:
Adherence to Process
Conformance to Security
Configuration Verification
Ultimately the purpose of audit is continual optimization. Audit should be a “critical” review that leads to recommendations and corrective updates to the process.
