Why do I need an audit? To understand what to protect, how to protect, what has already been done, what can be used again and so on. In general, to understand the state of the infrastructure and build a clear plan of its modernisation.
It is the stage of the audit when the basic work is done because planning of the security is one of the most labour-intensive tasks. It is because the new protected infrastructure should become a part of the company workflow. Here, attention to the details of the processes wins the deal. Therefore, the audit will be long and thorough.
If you are not ready for long and thorough projects, it is worth trying pilot implementation in miniature on a separate section
The main stages
