security audit

{
  "id": "MLC-T-CYB-003777",
  "term": "security audit",
  "field": "Cybersecurity",
  "definition": "1. Independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures, and to recommend necessary changes in controls, policies, or procedures. Note: In some publications, audit is used in conjunction or synonymously with the terms inspection or assessment; these terms are not interchangeable.\n\n2. Independent review and examination of a system’s records and activities to determine the adequacy of system controls, ensure compliance with established security policy and procedures, detect breaches in security services, and recommend any changes that are indicated for countermeasures.",
  "references": [
    "CNSSI 4009-2022",
    "NIST SP 800-82r3 from ISO/IEC 7498-1:1994",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-audit/"
}