IT Audit, Cybersecurity Audit and Compliance Services

IT Security Audit, Network Security Audit

Altius IT's IT security audit and network security audit review the administrative, physical, and technical controls that protect your systems and data.  A 360 degree view of risk across your technology, your people, and your processes, identifying the threats that reach your network before an attacker finds them.

Cybersecurity Audit & Penetration Test

Altius IT's cybersecurity audit performs a controlled, real-world evaluation and penetration test of your firewalls, network entry points, and public IP addresses.  We attempt the access an external attacker would attempt, then report what worked and the steps to close it.  The audit also covers the controls that decide whether you detect an intruder: EDR, SIEM, email and anti-phishing defenses, cloud security configuration, and identity controls including MFA and progress toward zero trust.

Ransomware Recovery Readiness Audit

Altius IT's ransomware recovery readiness audit evaluates whether your organization could recover from a ransomware attack.  We review backup coverage and immutability, restore testing, network segmentation, privileged access, and your incident response plan against your recovery time and recovery point objectives.

AI Governance Audit

Altius IT's AI governance audit reviews the program around your AI rather than a single application: model inventory, oversight and accountability, acceptable use and procurement policy, and the AI risk carried by your vendors.  Measured against the NIST AI Risk Management Framework and the White House AI Bill of Rights.

Website Security Audit, Web API Security Audit

Altius IT's website security audit evaluates your web applications and the APIs behind them for SQL injection, cross site scripting, buffer overflow, broken authentication and authorization, and encryption issues.  Our methodology combines manual testing with automated tools, so the logic flaws a scanner cannot see are found as well.

Privacy Audit: CCPA, CIPA, GDPR

Altius IT's privacy audit examines how personal information is collected, used, disclosed, and sold, and whether you can evidence it: CCPA and CPRA consumer rights, CIPA exposure from website tracking technologies, and GDPR Article 28 and 32 processor obligations.

Compliance Audit: NIST, ISO 27001

Altius IT's compliance audit tests whether your administrative, physical, and technical safeguards meet the standard you are held to: NIST 800-53, ISO 27001, the HIPAA Security Rule, GLBA, FFIEC, FISMA, ITAR, and others.  Our report names each gap and the steps that close it.

Risk Assessment, HIPAA Security Risk Assessment

Altius IT's risk assessment identifies your assets, the threats to them, and the controls needed to protect them cost effectively, including the HIPAA Security Risk Analysis required of covered entities and business associates.  The result is a prioritized roadmap rather than a pass or fail.

Mobile Application Security Audit

Altius IT's mobile application security audit identifies vulnerabilities in your mobile application and everything it connects to: interfaces to servers, databases, firewalls, and internal server configurations.  A manual methodology combined with penetration testing.

Social Engineering Audit

Altius IT's social engineering security assessment tests whether your people can be talked into handing over what a firewall would not.  It measures the effectiveness of your security awareness and education program and benchmarks your organization against industry averages.