Network Audits Documentation & Audit

For any IT company to support it's customers efficiently and effectively they must have detailed knowledge of the environment and its configuration. Performing an audit will ensure that amac networks can fulfill its role under a Maintenance Care Plan. An audit report will also highlight any inadequacies within the organisation's infrastructure, and amac networks can make recommendations for any changes that may improve the efficiency or security of internal systems.

An audit will also provide a permanent record for the organisation, of its internal systems including a telecommunications asset and services audit as well as providing a software inventory, which may highlight any requirements for extra licensing.

Network Diagram

This is an overview of WAN infrastructure including remote site VPN connections and an overview of all server and network equipment including print servers, router and switches.

Computer Inventory

Computer inventory document is a summary listing of all workstation and servers detailing information such as Computer Name, IP Address, User Name, Operating System, Service Pack, CPU Speed, Memory Size, and C: Free Space, System Manufacturer, System Product Name, System Serial Number, and Windows Product Key.

Software Licensing

This document details licensed software information including License keys for Server operating system, Antivirus applications, Backup applications and any other applications available. Consultation, if required, to cover any issues outlined during the audit process

Security Audit

1. Vulnerability Scanning

This involves scanning the infrastructure set up to reveal any existing vulnerabilities.

2. Report Audit

This involves auditing reports that are regularly generated as a part of the Security management process of the organisation.

Audits are conducted on:

Logs - logs that are maintained within the system (syslogs) by the network, system and database components.

IDS Reports - reports that are generated by the Intrusion Detection System on an on-going basis.

Any other reports that are maintained/generated by the organisation as part of its security maintenance program.

3. Security Architecture Audit

This involves auditing the existing security architecture of the organisation.

4. Baseline Auditing

This involves auditing the security setup to verify that it is in accordance with the security baseline of the organisation.

Deviations are recorded to analyse compliance during the audit period.

5. Internal Control and Workflow Audit

This involves auditing the existing workflow in the organisation to ascertain whether it is sufficient to handle and escalate response to security issues.

6. Policy Audit

The Security policy is audited to ensure that it is in line with the business objectives of the organisation and complies with standards that the company follows or wishes to follow.

7. Threat/Risk Assessment

Assessment of the various risks and threats facing the company’s Information systems. Taking into account the results of the audits, this assessment gives an overall picture of the security risk/ threat to the organisation.