Audit and testing

IT audit

What is an IT audit?

An IT audit is the systematic review of an organisation's information technology, meaning the systems, the processes and the evidence behind them.

The term comes from financial auditing and is broader than an IT security audit. Beyond security, an IT audit can look at system availability, licensing, cost and whether the existing IT actually supports what the business is trying to do.

In the language of small and mid sized companies, IT audit, IT check and IT security audit usually mean the same thing: an independent stocktake with a written result. When in doubt, ask two questions: what is the scope in areas and individual checks, and what does the report you end up with look like.

Scope and process of the IT Check

Related terms

IT security check An IT security check is a structured review of a company's IT. It records the current state of network, servers, workstations and… IT security audit An IT security audit reviews a company's IT security against a benchmark defined in advance. That benchmark can be a recognised s… Findings report and action plan An audit findings report is the written result of an IT review. It records what was examined, what was found and how serious each…

All terms in the knowledge base

Note: This entry reflects the state of knowledge to the best of our understanding and serves as general orientation. It is not legal advice. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu.

From the term to practice

Where does your business actually stand?

The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT. The first call takes 20 minutes and carries no charge.

Book a first call