Audit and Assessment Guide

How to Choose the Right Assessment
Altius IT's assessments identify the areas that
create the most value for your firm. By identifying
and quantifying IT related strengths and weaknesses,
we deliver bottom line results. Our audits are
assessments are organized into:
-
Protection against external threats (hackers)
-
Protection against internal threats (human
error, theft of intellectual property,
protection against viruses, suppliers, etc.)
Altius
IT's services help protect you from your internal
and external threats. The Altius IT
Audit Roadmap leads you
through our 10 step audit process.
Protection Against External Threats
Audits
and assessments are the first step in Internet risk
management protection:
-
Firewall
protection -
penetration assessments evaluate the security of
your firewall by simulating an attack from a
malicious user (hacker).
-
Web applications
- web sites are vulnerable to programming errors
and emerging threats. Our web application
and database assessment checks for over 35,000
vulnerabilities in your web site html code and
related interfaces to internal database systems
(SQL databases, etc.).
Protection Against Internal Threats
Many
threats originate inside the network instead of
penetrating your perimeter from the outside.
Altius IT's 50 point
network
and security audit identifies internal security
vulnerabilities such as weak passwords, inactive
user accounts for past employees, unencrypted
sensitive information, software patch management,
rogue wireless access points, inconsistent
anti-virus and anti-spyware updates, data backup
errors, remote access to data, e-mail archiving,
policies and procedures, and many other areas.
Our
assessments and audits help protect you against
internal security breaches and theft of your
intellectual property. Our services protect
you against employee mistakes, supplier
connectivity, subcontractor access to confidential
information, and other individuals that are provided
access to your internal networks.
Compliance
Altius IT provides Information Technology
compliance audits
and assessments to help organizations meet
requirements, standards, and guidelines.
Certification
Upon completion of our services, Altius IT
provides a certification letter for distribution to
your customers, clients, and prospects. We
also provide you with the
Altius IT Secure Seal that can be prominently
placed on your web site. This provides peace of mind that sensitive information remains secure.
Why Altius IT
We are certified by the Information Systems
Audit and Control Association as Certified
Information Systems Auditors (CISA). Altius IT's experts provide outside,
independent assessments that
help organizations:
- Achieve compliance with industry
standards
- Develop strong relationships with your
customers
- Minimize business and IT related risks
- Reduce costs while ensuring information
protection

|