A cybersecurity audit is an independent, documented review of a company's controls, policies and configurations to check whether they protect its information and meet standards such as ISO 27001 or PCI DSS. The result is a report with findings, risk levels and prioritized recommendations.
Go deeper on the TecnetBlog: What is an information security audit
security audit, IT audit, information security audit, security assessment
Related terms
Information security
Information security is the discipline that protects an organization's information, in any format, so it stays confidential, accurate and available. It goes beyond cybersecurity to include paper documents, conversations and processes, and it is organized through policies, controls and standards such as ISO 27001.
Data classification
Data classification is the process of labeling a company's data by sensitivity, for example public, internal, confidential and restricted, so each level gets the right protection. It tells you what to encrypt, who can see it and what must never leave the organization.
ISO 27002
ISO 27002 is the international standard that explains how to apply the information security controls required by ISO 27001. Its 2022 version describes 93 controls grouped into four themes: organizational, people, physical and technological, with practical guidance for implementing each one.
Risk matrix
A risk matrix is a table that combines the likelihood of an event with the impact it would have, placing each risk at a level such as low, medium, high or critical. It lets you compare different risks with the same criteria and decide which ones to address first.
CISO (chief information security officer)
The CISO (chief information security officer) is the executive responsible for a company's information security strategy: they set priorities, budget and policies and answer to leadership for cyber risk. Companies that do not need a full-time CISO can hire a virtual CISO, or vCISO.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.