Audit

Start

The most important thing for us is the customer, which is why we attach such great importance to after-sales service. We think of the IT department as a homogenous organism in which the work of each element is important for the quality of the whole. We believe that even a very well-functioning organisation can work even more efficiently.

We treat each such project individually and carry it out according to best practice using interviews with employees, our own audit scripts or dedicated tools in the client's environment.

INCREASE INFRASTRUCTURE SECURITY

We analyse security policies, verify user and group permissions, track changes to facilities and access to resources and monitor event logs. We assess access control configurations and the identification and elimination of threats, such as deleted or inactive accounts.

Conducting such an audit at a company guarantees improved security, which consists of hardening system settings and recommendations including best practices.

REGULATORY COMPLIANCE

The result of the audit service is a report containing guidelines to be implemented on the infrastructure side. With it, companies and organisations can ensure regulatory compliance, minimise the risk of security breaches and ensure the integrity and availability of Active Directory-based services.

ELIMINATING INFRASTRUCTURE VULNERABILITIES

Our audit service includes a specialised and low-level check of Active Directory configurations, analysis of historical configuration merits, verification of the environment for anomalies and analysis of current security features. Our main focus is on securing the environment for vulnerabilities in its configuration that allow attackers to take control of sites, carry out theft of credentials and user data. We analyse passwords, identifying weak and leaked ones. We detect backdoors and configurations that allow network scanning and reconnaissance.

We wrote about the importance of a directory service in the infrastructure of large organisations here: