Technical Audit · Systems Review · ISO 27001

Technical Security Audit

The purpose of the Technical Security Audit is to assess the security status of the organisation's information systems through a detailed technical review of their main components and controls.

Technical review

Network, servers, availability, protection and user computers

Analysis of results

Vulnerabilities classified by severity level

Report

Executive summary and recommendations for improvement

Service

What is a Technical Security Audit?

This is an in-depth analysis of information systems that makes it possible to identify strengths, weaknesses and areas for improvement from a security perspective. The review covers the different elements that make up the organisation's technology environment, providing a complete view of its current situation.

Benefits of the audit

The result of the audit offers a clear and precise view of the organisation's present and future security needs. It also makes it possible to assess systems using good practices and the principles established by internationally recognised standards, such as ISO 27001, as a reference.

Thanks to this analysis, the company can learn its level of maturity in security and have objective information to define priorities and adopt improvement measures.

Related Services

Penetration Testing Internal Penetration Testing Cloud Penetration Testing Web Application Audit ASV Scans Source Code Audit

Network security

Analysis of the network structure, review of the devices in charge of controlling data flow, of the configuration and status of remote and wireless access devices and of protection, filtering and intrusion detection devices, as well as detection of unsecured public points.

Security of Internal Servers and Network Services

Detection of servers and services with outdated versions, of inadequate configurations of Operating Systems and Network Services and of security requirements (updates and patches, security configuration adjustments or complete hardening processes).

Systems and Data Availability Management Systems

Detection of deficiencies in the Backup Policy or its application, in Monitoring or Remote Management Systems and in Contingency and Continuity Plans or their application; detection of devices and systems that are highly critical for business continuity; and verification of the fault tolerance measures applied.

Protection Systems

Review of the security of Content Containment and Filtering Systems, detection of anomalies in the operation of application-level protection systems (Antivirus, Antispam and Content Filtering -Web, FTP, P2P...-), identification of security requirements (need for updates or patches, security configuration deficiencies and scope of action) and the possibility of legal compromise or damage to reputation.

Security of User Computers

Determine the ability of a user to perform actions without control by network administrators on or from their machine (compromising a system, accessing or sharing data or resources and installing or uninstalling software) and detection of machines that are not up to date or that have disabled or misconfigured security systems (client antivirus, personal firewalls, remote monitoring or management tools...).

Results

As a result of all the work analysing the systems and the subsequent analysis of results and documentation, the report will set out the results obtained in the security audit together with the recommendations, where necessary (on network architecture, systems...).

Some of the results, which will depend on the specific characteristics of each case, are the following:

Executive summary.
Result obtained for each of the points analysed.
Vulnerabilities detected and classified by severity level, along with recommendations for removing them.
Recommended configuration changes to the systems to improve security.
Recommended changes to authentication, access control and password policies...
Recommendations on new applications and services that help raise the security level.
Current network map and recommendations for changes to improve the current network topology.
Recommended changes to the rules of the Perimeter Protection Systems (routers, firewalls, IDS...).
Identification of critical points where it is advisable to improve availability.
Recommended changes to the different network accesses.
Recommendations to improve user authentication and access points on the wireless network.
Recommended changes to antivirus systems, their distribution and configuration.
Improvements to reactive security systems.
Recommendations, reservations and corrective actions on the technical aspects defined by ISO 27001.

Scope of service

What this service covers

Network security

Analysis of the network structure, review of the devices in charge of controlling data flow and detection of unsecured public points.

Internal servers and network services

Detection of servers and services with outdated versions and of inadequate configurations of Operating Systems and Network Services.

System and data availability

Detection of deficiencies in the Backup Policy, in Monitoring Systems and in Contingency and Continuity Plans.

Protection systems

Review of the security of Content Containment and Filtering Systems and of application-level protection systems.

User computers

Determine the ability of a user to perform actions without control by administrators and detect machines that are not up to date or have security systems disabled.

Working with Internet Security Auditors has been a highly satisfactory experience. Their support in migrating to the ISO/IEC 27001:2022 standard, conducting internal audits, and the PCI DSS certification process has been fundamental in strengthening our information security management system.

Ricardo Andrés Cárdenas Galvis

Information Security Office · Neurona

The strategic support of Internet Security Auditors as CISOaaS has been fundamental in reinforcing our internal team. Their expertise perfectly complements our CISO's work and has allowed us to advance more quickly in our cybersecurity maturity.

CISO

RACC

On behalf of Outsourcing SAS BIC, we would like to express our gratitude for your commitment and dedication during the implementation of PCI DSS compliance in our call center. We succeeded in establishing a secure environment in accordance with the most demanding requirements of the payment industry.

Yulian Colmenares

Information Security Office · Outsourcing SAS BIC

Working with Internet Security Auditors has been a positive experience in every respect. Their team combines solid technical expertise with a great willingness to collaborate, which has strengthened our security posture and regulatory compliance.

Andrés Mejía

Head of GRC · Payválida

As the CFO of Saint Louis University – Madrid Campus, I have had the opportunity to work with Internet Security Auditors. They have been our indispensable partner for the implementation of the requirements set forth by GDPR regulations. I would like to highlight their availability to resolve questions and their ability to develop a legal framework with concrete and understandable actions…

Victoria Villarreal Palazón

Vice President & Associate VP CFO · Saint Louis University

As CFO of Fleurop - Interflora Spain, we have been working with Internet Security Auditors for years in the areas of consulting and GDPR compliance. As Interflora is a company 100% focused on online commerce, the professional services of Internet Security Auditors provide us with support, security, and the peace of mind that all of our activity is aligned with GDPR compliance.

Francisco Tébar Prada

CFO Southern Europe · Fleurop - Interflora Spain

As CISO at Intaremit S.A., we place the utmost importance on logical security. This is not only due to the mere fact that PCI-CPP regulations require us to conduct 4 internal and external vulnerability scans and an annual internal and external pen-test, but also because of the security and peace of mind our company wishes to provide to each and every one of its clients. We have been working and collaborating with Internet Security Auditors for over 10 years due to their experience, commitment, and accessibility; therefore, I recommend them without hesitation.

Sergio Sainz de la Maza

CISO · Intaremit

At Grupo Arbulu, we have collaborated closely with Internet Security Auditors on the implementation of advanced cybersecurity measures. Thanks to their expertise, we have significantly improved our ability to detect and mitigate cyber risks. Their comprehensive audits and customized solutions have strengthened our security infrastructure, ensuring the protection of our data and the continuity of our operations.

Marcos Montes de Oca

CIO · Arbulu Group

As CEO of Beruby, we worked with Internet Security Auditors when we had to urgently perform a PCI DSS Attestation of Compliance. The entire process was extremely fast, efficient, and professional. Their team provided us with excellent support, demonstrating great technical knowledge and commitment. We undoubtedly recommend their services to any company in need of cybersecurity solutions.

Miguel Acosta

Global CEO · Beruby

At Grupo AR, we highly value the brand protection service provided by Internet Security Auditors for its comprehensive and proactive approach. Their highly qualified team allows us to identify and mitigate risks that could affect the AR Construcciones brand and its various companies.

Nestor Ivan Melo Ballen

Cybersecurity Director · AR Group

Contact

Don't hesitate to get in touch with us if you need more information

Send us your questions and we will get back to you as soon as possible.

R

Ricardo Andrés Cárdenas

2 months ago

Working with Internet Security Auditors has been a highly satisfactory experience. Their support in the migration to ISO/IEC 27001:2022 and the PCI DSS certification process has been fundamental to strengthening our ISMS.

A

Andrés Mejía

3 months ago

Your team combines solid technical expertise with a strong willingness for collaborative work, which has strengthened our security posture and regulatory compliance.

V

Victoria Villarreal Palazón

4 months ago

They have been our indispensable partner for the implementation of GDPR requirements. I would highlight their availability to resolve questions and their ability to develop a legal framework with concrete and understandable actions.

M

Miguel Acosta

5 months ago

The entire PCI DSS Attestation of Compliance process was extremely fast, efficient, and professional. We undoubtedly recommend their services to any company in need of cybersecurity solutions.

S

Sergio Sainz de la Maza

6 months ago

We have been working with Internet Security Auditors for over 10 years due to their experience, commitment, and accessibility. I recommend them without hesitation.

Request information

I am a human

Name

Last name

Contact phone

Corporate email

Company

Country

Service of interest

Tell us what you need

I have read and accept the privacy policy. I would like to receive information about Internet Security Auditors' services and publications. We will contact you as soon as possible.

Global Presence