Context and scope
Organisational, technical and regulatory audit: scope, evidence collection, tests, gaps and recommendations.
Work performed
- Define audit objectives, criteria, stakeholders and sequencing.
- Review policies, responsibilities, awareness, incidents and continuity.
- Assess systems, AD, networks, firewalls, configurations and Web security in a dedicated environment.
- Qualify findings and produce priorities, management summary and treatment plan.
Documented deliverables and outcomes
Audit plan; checklists and evidence; intrusion-test report; management summary; prioritised recommendations.
Scope of outcomes
The reviewed public documents describe the work and deliverables above. They do not provide a quantified before/after series supporting a risk-reduction percentage here.
Methods and tools
ISO/IEC 27002 · RGS / ANSSI · RGPD / GDPR · CVSS · OWASP
Public scope
Client data, exploitable configurations and proprietary mechanisms remain excluded from this presentation.
Last reviewed: 26 October 2026
Discuss this work