PROCEDURAL FRAMEWORK FOR CONDUCTING INFORMATION SECURITY AUDITS

Apply

PROCEDURAL FRAMEWORK FOR CONDUCTING INFORMATION SECURITY AUDITS

Journal Title: International scientific journal Science and Innovation - Year 2025, Vol 4, Issue 4

Abstract

This paper presents a comprehensive analysis of the various types of audits that should be undertaken within the scope of an information security audit. Information security auditing represents a fundamental element of an effective cybersecurity management program, serving to identify and mitigate risks, compliance gaps, and system vulnerabilities that may compromise organizational data and operational continuity. A robust audit framework should incorporate multiple evaluation methodologies, including compliance audits, which assess the extent to which an organization conforms to applicable legal, regulatory, and industry-specific standards. The findings of such audits are essential for strengthening organizational resilience and ensuring ongoing adherence to best practices in information security management.

Authors and Affiliations

D. S. Fayziyeva, M. U. Zokirjonova

Keywords

information security audit methodology security policy risk assessment system vulnerabilities compliance audit security standards ISO/IEC 27001 risk management data protection encryption authentication vulnerability assessment penetration testing internal audit cybersecurity governance audit reporting cyber threats security controls compliance assurance.

EP ID EP765268
DOI 10.5281/zenodo.15305302
Views 30
Downloads 0