IT security audit providers

[Sean Curry]

Greetings,

My company is preparing to do a first ever IT security audit and we are
currently looking for potential providers to give us an unbiased "look in
the mirror" does anyone here have any suggestions or recommendations for a
good audit firm?

Thanks,

--Sean Curry

 

[michal bucko]

Hello,

I strongly advise you to take a close look at Eleytt's (www.eleytt.com)
offer. Our experts
have provided security audits for big corporations, as well as smaller ones.


Michal Bucko
www.eleytt.com

 

[S. Pidgorny]

Whoever you pick make sure you have quality/outcome acceptability criteria.
If you have an internal security team, make them run a similar activity in
parallel as well as a chance to challenge some of the outcomes. Otherwise
the audit will leave you knowing not much more than before it.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Sean Curry" <scurry0@comcast.net> wrote in message
news:OrF4NQowHHA.3444@TK2MSFTNGP05.phx.gbl...
> Greetings,
>
> My company is preparing to do a first ever IT security audit and we are
> currently looking for potential providers to give us an unbiased "look in
> the mirror" does anyone here have any suggestions or recommendations for
> a good audit firm?
>
> Thanks,
>
> --Sean Curry
>
>
>

 

[Steve Riley [MSFT]]

Remember, the purpose of an audit is to measure how well (or not) you're
actually complying with your own policies. In other words, an audit answers
the question, "Are you doing the things that you say you should be doing?"
Without a security policy, there's very little that an audit can do for
you -- other than compare your (non-)performance against someone else's
checklist.

Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley


"Sean Curry" <scurry0@comcast.net> wrote in message
news:OrF4NQowHHA.3444@TK2MSFTNGP05.phx.gbl...
> Greetings,
>
> My company is preparing to do a first ever IT security audit and we are
> currently looking for potential providers to give us an unbiased "look in
> the mirror" does anyone here have any suggestions or recommendations for
> a good audit firm?
>
> Thanks,
>
> --Sean Curry
>
>
>