1) Security audits evaluate the level of information security in an organization across technical, physical, and administrative controls. 2) There are three main types of security audits: external audits conducted by a third party, internal audits done within a company by other units or headquarters, and self-audits conducted by in-house personnel. 3) The objectives of security audits are to assess the adequacy and effectiveness of security measures and management controls through evaluating physical security processes, defining roles and responsibilities, and focusing on high-risk areas.

1. Security Audit view
© COPYRIGHT PLN9 SECURITY SERVICES PVT. LTD. ALL RIGHTS RESERVED
PLN9, A Complete Security Solution In Association
With Tyco

2. Introduction

3. 1- Security audit is an audit on the level of information security in an
organization. Within the broad scope of auditing information security
there are multiple types of audits, multiple objectives for different audits,
etc. Most commonly the controls being audited can be categorized to
technical, physical and administrative.
2- Auditing information security covers topics from auditing the physical
security of data centers to auditing the logical security of databases and
highlights key components to look for and different methods for auditing
these areas.

4. Types Of Audits

5. 1- External : These are conducted by a third party
2- Internal : Corporate : By headquarters
or
Personnel from other units of the same company.
3- Self : In –house – by the plant personnel themselves.

6. Audits Objectives

7. 1- The main objective of the audit is to assess the adequacy and
effectiveness of EC’s security measures and management controls,
through four specific objectives focusing on high-risk areas.
2- To assess the adequacy of the physical security threat identification and
risk management process, with a focus on activities performed at the
facility level.
3- To determine whether roles and responsibilities of all parties involved in
departmental physical security are clearly defined, performed by the
appropriate party, and cover the span of security activity, as defined by
the TB Policy on Government Security;

8. Thank you