{"id":10751,"date":"2016-04-08T15:14:44","date_gmt":"2016-04-08T12:14:44","guid":{"rendered":"http:\/\/unit.com.ua\/?page_id=10751"},"modified":"2016-04-14T14:48:37","modified_gmt":"2016-04-14T11:48:37","slug":"audit-informatsionnoj-bezopasnosti","status":"publish","type":"page","link":"https:\/\/unit.com.ua\/en\/audit-informatsionnoj-bezopasnosti\/","title":{"rendered":"Information Security Audit"},"content":{"rendered":"<p><strong>Information security audit<\/strong> \u2013 a systematic process of obtaining objective qualitative and\/or quantitative evaluation of the current status of Company information security in accordance with specific criteria and safety indicators.<\/p>\n<p>Audit allows to evaluate the current safety status of information system (IS) operation, to assess and predict risks, to manage their impact on the company&#8217;s business processes, appropriate and reasonable approach to the issue of ensuring the security of its information assets, strategic development plans, marketing programs, content, corporate databases.<\/p>\n<p><strong>Types and purposes of audit<\/strong><\/p>\n<p><strong>There two kinds of audit \u2013 external and internal.<\/strong><\/p>\n<p><strong>External audit<\/strong> \u2013 is usually a one-time event held on the initiative of the company or shareholders. The external audit is recommended (and is required for a number of financial institutions and joint stock companies) to carry out on a regular basis.<\/p>\n<p><strong>Internal audi<\/strong>t is a continuous activity that is carried out in accordance with the plan, the preparation of which the internal audit department and approved by the company&#8217;s management. Security audit of information systems is one of the components of an IT audit.<\/p>\n<p><strong>The objectives of information security audit are:<\/strong><\/p>\n<ul>\n<li>risk analysis associated with the implementation of the security threats against the IS resources;<\/li>\n<li>assessment of the current level of IS protection;<\/li>\n<li>localization of bottlenecks in the IS security system;<\/li>\n<li>conformity assessment of IS to existing standards in the field of information security;<\/li>\n<li>making recommendations on the introduction of new and more effective existing IS security mechanisms.&nbsp;\n<p><strong>Main stages of security audit<\/strong><\/p>\n<p>IS security audit work includes a number consecutive stages, which generally correspond to the stages of the integrated IT audit IS, which includes:<\/p>\n<ul>\n<li>initiation of audit procedure;<\/li>\n<li>collecting audit information;<\/li>\n<li>audit data analysis;<\/li>\n<li>making recommendations;<\/li>\n<li>preparation of the audit report.<\/li>\n<\/ul>\n<p>At the stage of <strong><em>audit procedure initiation<\/em><\/strong>, the following organizational issues must be settled:<\/p>\n<ul>\n<li>the rights and responsibilities of the auditor should be clearly defined and are documented in his job description, as well as the position of the internal (external) audit;<\/li>\n<li>the auditor should be prepared and agreed with the management plan for the audit;<\/li>\n<li>the position of the internal audit should be fixed, in particular, that the company&#8217;s employees are required to assist the auditor and provide all necessary information to carry out the audit.<\/li>\n<\/ul>\n<p>At the stage audit procedures initiation the border of the survey should be defined. Plan and boundaries of the audit are discussed at the working meeting, which involves the auditors, the company&#8217;s management and heads of departments.<\/p>\n<p>Stage of <strong><em>audit information collection<\/em><\/strong> is the most difficult and time-consuming. This is due mainly to the lack of necessary documentation on IS and the need for close cooperation with the auditor with many officials of the company.<\/p>\n<p>The competent conclusions about the state of affairs in the company&#8217;s information security auditor can be made only on condition that all the necessary input data for analysis.<\/p>\n<p><strong><em>Recommendations<\/em><\/strong> issued by the auditor on the results of the analysis of the IS status, defined used approach, particularly surveyed IS status of information security and the level of detail used in the audit. In any case, the auditor&#8217;s recommendations should be specific and applicable to this IS, economically justified, reasoned (backed up by the results of the analysis) and sorted in order of importance. At the same time measures to ensure the protection of organizational level almost always take precedence over the specific software and hardware protection methods.<\/p>\n<p><strong><em>Audit report<\/em><\/strong> is the main result of the audit. Its quality is characterized by the quality of the auditor&#8217;s work. It must contain a description of the audit objectives, characteristics surveyed IS indication audit limits and the methods used, the results of the audit data analysis, conclusions, summarizing these results and an assessment of the level IS protection and compliance with its requirements of the standards, and, of course, the auditor recommendations to address existing shortcomings and improve protection system.<\/li>\n<\/ul>\n<p><\/p>","protected":false},"excerpt":{"rendered":"<p>Information security audit \u2013 a systematic process of obtaining objective qualitative and\/or quantitative evaluation of the current status of Company information security in accordance with specific criteria and safety indicators. Audit allows to evaluate the current safety status of information system (IS) operation, to assess and predict risks, to manage their impact on the company&#8217;s &hellip; <a href=\"https:\/\/unit.com.ua\/en\/audit-informatsionnoj-bezopasnosti\/\" class=\"more-link\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-10751","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u0423\u043d\u0406\u0422 - \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457. \u0423\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0430 \u0406\u0422 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f.<\/title>\n<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0423\u043d\u0456\u0422 (\u00ab\u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457\u00bb) \u2013 \u043b\u0456\u0434\u0435\u0440 \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0438\u043d\u043a\u0443 \u0437 \u0440\u043e\u0437\u0440\u043e\u0431\u043a\u0438 \u0442\u0430 \u0456\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0456\u0457 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u0438\u0445 \u043a\u043e\u043c\u043f&#039;\u044e\u0442\u0435\u0440\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u0423\u043d\u0406\u0422 - \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457. \u0423\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0430 \u0406\u0422 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f.\" \/>\n<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0423\u043d\u0456\u0422 (\u00ab\u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457\u00bb) \u2013 \u043b\u0456\u0434\u0435\u0440 \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0438\u043d\u043a\u0443 \u0437 \u0440\u043e\u0437\u0440\u043e\u0431\u043a\u0438 \u0442\u0430 \u0456\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0456\u0457 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u0438\u0445 \u043a\u043e\u043c\u043f&#039;\u044e\u0442\u0435\u0440\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/\" \/>\n<meta property=\"og:site_name\" content=\"UNIT\" \/>\n<meta property=\"article:modified_time\" content=\"2016-04-14T11:48:37+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/unit.com.ua\\\/audit-informatsionnoj-bezopasnosti\\\/\",\"url\":\"https:\\\/\\\/unit.com.ua\\\/audit-informatsionnoj-bezopasnosti\\\/\",\"name\":\"\u0423\u043d\u0406\u0422 - \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457. \u0423\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0430 \u0406\u0422 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f.\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/unit.com.ua\\\/#website\"},\"datePublished\":\"2016-04-08T12:14:44+00:00\",\"dateModified\":\"2016-04-14T11:48:37+00:00\",\"description\":\"\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0423\u043d\u0456\u0422 (\u00ab\u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457\u00bb) \u2013 \u043b\u0456\u0434\u0435\u0440 \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0438\u043d\u043a\u0443 \u0437 \u0440\u043e\u0437\u0440\u043e\u0431\u043a\u0438 \u0442\u0430 \u0456\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0456\u0457 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u0438\u0445 \u043a\u043e\u043c\u043f'\u044e\u0442\u0435\u0440\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/unit.com.ua\\\/audit-informatsionnoj-bezopasnosti\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/unit.com.ua\\\/audit-informatsionnoj-bezopasnosti\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/unit.com.ua\\\/audit-informatsionnoj-bezopasnosti\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/unit.com.ua\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0410\u0443\u0434\u0438\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/unit.com.ua\\\/#website\",\"url\":\"https:\\\/\\\/unit.com.ua\\\/\",\"name\":\"UNIT\",\"description\":\"Universal Information Technologies\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/unit.com.ua\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u0423\u043d\u0406\u0422 - \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457. \u0423\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0430 \u0406\u0422 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f.","description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0423\u043d\u0456\u0422 (\u00ab\u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457\u00bb) \u2013 \u043b\u0456\u0434\u0435\u0440 \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0438\u043d\u043a\u0443 \u0437 \u0440\u043e\u0437\u0440\u043e\u0431\u043a\u0438 \u0442\u0430 \u0456\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0456\u0457 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u0438\u0445 \u043a\u043e\u043c\u043f'\u044e\u0442\u0435\u0440\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/","og_locale":"en_US","og_type":"article","og_title":"\u0423\u043d\u0406\u0422 - \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457. \u0423\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0430 \u0406\u0422 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f.","og_description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0423\u043d\u0456\u0422 (\u00ab\u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457\u00bb) \u2013 \u043b\u0456\u0434\u0435\u0440 \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0438\u043d\u043a\u0443 \u0437 \u0440\u043e\u0437\u0440\u043e\u0431\u043a\u0438 \u0442\u0430 \u0456\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0456\u0457 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u0438\u0445 \u043a\u043e\u043c\u043f'\u044e\u0442\u0435\u0440\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.","og_url":"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/","og_site_name":"UNIT","article_modified_time":"2016-04-14T11:48:37+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/","url":"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/","name":"\u0423\u043d\u0406\u0422 - \u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457. \u0423\u043a\u0440\u0430\u0457\u043d\u0441\u044c\u043a\u0430 \u0406\u0422 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f.","isPartOf":{"@id":"https:\/\/unit.com.ua\/#website"},"datePublished":"2016-04-08T12:14:44+00:00","dateModified":"2016-04-14T11:48:37+00:00","description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0423\u043d\u0456\u0422 (\u00ab\u0423\u043d\u0456\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u0456 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0439\u043d\u0456 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0457\u00bb) \u2013 \u043b\u0456\u0434\u0435\u0440 \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0438\u043d\u043a\u0443 \u0437 \u0440\u043e\u0437\u0440\u043e\u0431\u043a\u0438 \u0442\u0430 \u0456\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0456\u0457 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u0438\u0445 \u043a\u043e\u043c\u043f'\u044e\u0442\u0435\u0440\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.","breadcrumb":{"@id":"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/unit.com.ua\/audit-informatsionnoj-bezopasnosti\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/unit.com.ua\/"},{"@type":"ListItem","position":2,"name":"\u0410\u0443\u0434\u0438\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438"}]},{"@type":"WebSite","@id":"https:\/\/unit.com.ua\/#website","url":"https:\/\/unit.com.ua\/","name":"UNIT","description":"Universal Information Technologies","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/unit.com.ua\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/pages\/10751","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/comments?post=10751"}],"version-history":[{"count":7,"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/pages\/10751\/revisions"}],"predecessor-version":[{"id":12871,"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/pages\/10751\/revisions\/12871"}],"wp:attachment":[{"href":"https:\/\/unit.com.ua\/en\/wp-json\/wp\/v2\/media?parent=10751"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}