ABSTRACT
In a security audit, an auditor will review your records and activities, and examine the security strategy and mechanisms used to protect your organization. The security audit identifies, assesses, and mitigates risks. The ultimate goal of a security
audit is to propose a risk-driven security program that prescribes corrective and preventive actions necessary to bring current risks back to an acceptable level.
