Security and compliance audits
We review how your controls operate in practice: who approves access, what is logged, how changes are protected and whether recovery works. The assessment scope distinguishes advisory work from an independent PASC-conformant assessment.
Indicative project budget: €4,500–€22,000
We assess the controls your business actually uses: identity decisions, production changes, evidence retention, cloud configuration, incident handling and recovery. The scope separates advice, implementation and independent assessment. You receive a controls map, evidence record, prioritized findings and a practical remediation plan.
An audit is useful when it shows where governance decisions do not translate into operating controls. We follow selected transactions and changes from approval through execution, logging and review, then examine the exceptions that accumulate between teams.
Each conclusion is tied to evidence and accountable ownership. Where an independent assessment is required, the separate PASC-conformant assessment entity performs that role; our engineering and advisory activities remain individually scoped.
What we do with your team
- Interviews
- control walk-throughs
- evidence sampling
- configuration review
- findings validation
- corrective action planning
What you receive
- Scope and control map
- evidence-backed gap report
- corrective plan and management brief