-
Audits help ensure that security checks are made to monitor for threats, risks, or vulnerabilities that can affect an organization’s business continuity and critical assets.
-
This repository consists of project documents of conducting an internal security audit by an entry-level analyst.
-
Problem Statement - https://github.com/Pragna235/Internal-Security-Audit/blob/main/Security%20Audit%20Scenario.pdf
- Botium Toys - Scope, goals and risk assessment report : https://github.com/Pragna235/Internal-Security-Audit/blob/main/Botium%20Toys%20-%20Scope%2C%20goals%20and%20risk%20assessment%20report.pdf
- Control Categories : https://github.com/Pragna235/Internal-Security-Audit/blob/main/Control%20Categories.pdf
- Controls and Compliance Checklist - https://github.com/Pragna235/Internal-Security-Audit/blob/main/Controls%20and%20compliance%20checklist.pdf
- What is the audit meant to achieve?
- Which assets are most at risk?
- Are current controls sufficient to protect those assets?
- What controls and compliance regulations need to be implemented?
- Try to answer the above questions after reviewing the Scope, goals and risk assessment and the control and categories before formulating the result and recommendations.