Security Auditing — Security auditing evaluates evidence about whether security requirements and controls are being followed. It can examine policies, configurations, access records, testing results, and operational practices. Findings identify gaps and support corrective action within the audit’s defined scope.

Added November 6, 2026