ITSE's IT audit service includes an initial security audit to assess the effectiveness and suitability of current security arrangements within an organisation, from both a technical and management perspective. Each service includes a complete review of the network, providing efficient, comprehensive information on the vulnerabilities discovered, the risks associated with them, and a list of recommended solutions that can be implemented to resolve these issues. All our audits are designed to prevent legal damages and company brand damage, whilst improving customer confidence.

A Network Security Audit examines the effectiveness of an organization's security solutions, procedures and policies relating to hardware, software and users.

A Network Security Assessment comprises of:

• An examination of network topology
• An audit of the firewall and server configurations
• An audit of the security solutions currently in place
• A review of security policies
• A detailed report of the findings, issues and recommendations

The Network Security Auditing is undertaken by experienced C|EH, ECSA and/or CISSP qualified consultants and is structured around the requirements of PCI DSS and/or ISO 27001 for an Information Security Management System (ISMS). This includes:

• Access control
• Backups
• Antivirus
• Logging and monitoring
• Business continuity
• Vulnerability Management
• Penetration Testing
• PCI DSS (where requested)

The output of a Network Security Audit is a report with a non-technical overview of the impacts and likelihood of the most serious security issues, coupled with full details of the audit undertaken, more comprehensive descriptions of the individual issues, and recommendations for resolution.

The tNetwork Security Assessmen report is provided by email initially with a follow up face to face meeting schedule the same week to discuss the risks identified. We also make our auditors available for further meetings and discussions with those who are tasked with fixing any issues.

Unlike many other auditing organisations, not only do we provide the audit, we engage with the audited organisation to provide remediation services.  This can be delivered as a consultancy service, or as part of a Managed Security Service.

The Managed Security Service provides a guaranteed number of days on site, incident management, investigation and remediation services for a fixed period of time.  For more information on this service, please contact us at This e-mail address is being protected from spambots. You need JavaScript enabled to view it

A Network Security Audit will demonstrate to management if investment in security is required to reduce risk to an acceptable level, and justifies security budget expenditure.

A program of regular Network Security Audits will identify any infrastructure changes that have caused any major security vulnerabilities.