Advanced ICT
Consultants & Auditors LLP.
IT System Audit CONSULTANTS EXPERTS PROFESSIONALS and IT Security Review

An in-depth IT system audit or IT system security review can be performed on an individual system or database to identify risks and points of exposure. IT system audits focus on security controls over physical and logical security of the server, including change control, administration of server accounts, system logging and monitoring, incident handling, system backup and disaster recovery. The system or application will be reviewed against vendor recommendation and industry best practices, in addition to recommendations by our IT audit specialists.

Our Security Review is designed to assess the key aspects of your IT security related infrastructure, processes and technical management capabilities, and balance these against the cyber threats that are most relevant to your business.

Our aim is to help you understand your current situation, and come up with pragmatic strategy and set of improvements that directly relate to your current risk of a serious cyber security breach.

An IT system audit or security review can be performed on a variety of systems and services:

  • Windows & Active Directory Security Assessment
    Active Directory plays a critical role in the IT infrastructure, and ensures the harmony and security of different network resources in a global, interconnected environment. Our approach balances the use of Microsoft-branded solutions, open-source technology, and third-party tools.

    At ADVANCED ICT Consultants & Auditors LLP, we pride ourselves on our broad range of expertise, which combines deep Microsoft experience with a broad understanding of other technologies and environments, such as networking, Linux, and Citrix. Our engineers are particularly strong at tackling problems in heterogeneous environments that combine different technologies and require different IT skill sets. So if your organization is experiencing finger-pointing between different IT groups, we can help by identifying and resolving the root cause of your Windows or Active Directory issues.

  • UNIX Security Assessment
    Our team of experienced consultants will review your AIX, Linux, Solaris environments end to end covering both Desktops and Servers.
    We conduct detailed, platform-specific and/or “flavor”-specific review of the configuration of UNIX/Linux servers to verify that these systems are configured to maximize security and minimize exposure to cyber-attacks. Our certified engineers or consultants review system configuration files and settings, running processes, and installed packages to identify opportunities to improve security, in line with best-practices. Systems are inspected for evidence of rootkits and malware. Recommendations are provided for enhancing security.
    Review Highlights
    • Credentialed review of UNIX/Linux systems
    • Network-based testing
    • Automated scoring of configuration files and settings
    • Manual review of tool results and configurations
    • Review of installed packages and running processes
    • Rootkit/malware searches
    • Comparison against best-practices
    • Classification of severity of findings
    • Remediation recommendations

  • Database Security Assessment
    • Oracle
    • Microsoft SQL Server
    • MySQL
    • IBM DB2
    • REDIS
    • PostgreSQL
    • Maria DB
    • Apache Cassandra
    • ElasticSearch
    • Informix
    • Mongo DB

  • Network
    • Firewalls
    • Network Intrusion Detections Systems (NIDS)
    • Demilitarized Zones - DMZ Zones
    • Load Balancers
    • Proxies
    • Gateways
    • Virtual Private Networks (VPNs)
    • Host Intrusion Detections Systems (HIDS)
    • Application Performance Monitoring (APM)
    • End User Monitoring (EUM)
    • Synthentic Monitoring
    • Application Servers
    • Webservers

Functional Audit of Business Systems

This type of audit involves checking all aspects of the data protection system within a particular area, function or department. A Functional Audit concentrates on processes, procedures and records restricted to the department itself and does not cross inter-departmental boundaries.

The objective of a functional audit is to provide an independent evaluation of software products, verifying that its configuration items' actual functionality and performance is consistent with the requirement specifications.

Within the framework of a security audit we review the security settings of business systems, reveal data security threats, control weaknesses and, if necessary, propose the implementation of appropriate security measures. During a functional audit we examine whether the company’s IT systems operate according to predefined business logic and identify areas which do not comply with either efficiency or business requirements.

  • A way to ensure that security risks are managed in a cost-effective manner
  • A process framework for the implementation and management of controls to ensure that the specific security objectives of a business system are met
  • Use by management to determine the status of information security management activities
  • Use by internal and external auditors to determine the degree of compliance with the policies, directives and standards adopted by the organization
  • For implementation of business-enabling information security
  • We review whether the information systems operate in accordance with predefined business logic.
  • We review the design and operating effectiveness of application controls.
  • With the solutions we provide to remedy functional deficiencies you can reduce extra costs arising from manual troubleshooting
 
ADVANCED ICT » Consultants and Auditors LLP.