Bounce Back - Pacific Asia Travel Association Thailand Chapter

While a security audit should address all the issues above, the audit requires
several elements. It should include an assessment of the current situation
and procedures, person or persons responsible for this category of security,
suggestions for enhancements, and updates, and a timetable for these to
occur. In essence, a security audit works like a SWOT (Strengths, Weaknesses,
Opportunities and Threats) analysis. Some areas of security may require specialist
attention. This would apply to computer and IT security in which the nature of
threats is subject to daily changes.
Selected computer and phone security audit items :
• Computer and network passwords with log of holders.
• Physical assets
• Records of physical assets
• Data Backup and storage
• Logging of data access
• Access to sensitive customer data and credit card information
• Access to client data
• Access to financial and banking data
• Email protection from external spam and internal misuse.
• Anti Virus and Trojan security, firewalls
• Data defence measures
• Web site security
Bounce Back
15