 |
Compliance Audit
As a Certified Information Systems Auditor,
Altius IT's compliance audit evaluates your
administrative, physical, and technical
safeguards and controls to ensure they meet
compliance requirements: HIPAA, HITECH,
GDPR, FFIEC, GLB, FTC, FACTA, NIST, ISO,
ITAR, FISMA, and many others. Many of
our clients bundle our compliance audit with
our network security audit. Our report
identifies specific "gaps" and provides
detailed instructions to address each risk.
What the Compliance Audit Evaluates
We evaluate your administrative, physical and technical
safeguards against the standard you are actually held to, and
name each gap with the steps that close it:
- Administrative safeguards: policies, procedures, plans,
assigned responsibility, workforce training, and agreements
with service providers
- Physical safeguards: facility access, workstation use, device
and media controls
- Technical safeguards: access control, audit controls,
integrity, authentication, and transmission security
- Evidence: whether what the policy says is what the
configuration does, which is where most audits fail
- Frameworks and regulations including the HIPAA Security Rule,
HITECH, SOC 2, NIST 800-53, ISO 27001, GDPR, GLBA, FFIEC,
FTC, FACTA, ITAR and FISMA
Compliance and security are not the same thing, and we report
on both: passing an audit while remaining exposed helps nobody.
Audit Report
Altius IT's reports provide specific
recommendations and detailed steps you can
take to address any identified security
vulnerabilities and meet compliance
requirements. After delivery of our
reports, Altius IT provides three months
of free support to answer any questions
you may have. This ensures your security
vulnerabilities are properly mitigated or
eliminated.
Certified Auditor Letter
Let your clients and prospects know that you
are secure. As an IT security audit
company with Certified Information Systems Auditors,
we can provide you with our
Auditor Opinion
Letter stating your systems
meet security and compliance requirements.
Audit Team
Altius IT provides a certified auditor with each engagement:
- Certified Information Systems Auditor
- Experienced Project Manager
- Senior Security Engineer
Proposal
Our proposal provides you with detailed
information so you know exactly how we will
help you:
- Project scope and tasks
- Pricing options
- CV's of our audit and security team
members
- Sample reports you will receive
- Why Altius IT
Client Experience
Altius IT works with a diverse number of
clients across a wide range of industries.
We help organizations of all sizes, from the
smallest mom and pop start-up to the world's
largest and most recognized names. Our
case
studies show how we have helped
organizations identify, manage, and reduce their
risks.
|