Technical Information System Audits

Canaudit has over twenty-five years of experience performing technical information security and audit projects. Canaudit's team is renowned for their technical experience and industry-specific skill set. With their highly-skilled technicians and specially-crafted tools, Canaudit completes more work in less time than competing firms.

Canaudit utilizes a penetration process ideal for periodic system testing to identify network security flaws that hackers often compromise. In addition to penetration testing, Canaudit also offers network audits, operating system audits, database audits, remote access audits, investigation services, risk assessments and reviews. The use of automated techniques and scripts, created by Canaudit, reduces audit duration while increasing audit coverage.

To request a proposal or inquire about Canaudit's audit and consulting services contact Tamra at tamra@canaudit.com or 805.583.3723.

Project Descriptions

The Comprehensive Penetration Test, IT Security Baseline and Network Vulnerability Assessment are used to determine specific technology risks to your environment. All three include an internal security assessment, an external Internet penetration test, modem identification and testing, and a wireless security check.

Comprehensive Penetration Test
The Comprehensive Penetration Test is performed on a surprise basis. The intention is to thoroughly test the intrusion detection and response procedures to ensure that security breaches are quickly identified, investigated and contained. Our team also performs a full vulnerability assessment of the operating systems, databases, network devices, and the resident within the network.

IT Security Baseline
The IT Security Baseline is performed with the knowledge of the IT staff. It is similar to the Comprehensive Penetration Test except that the intrusion detection and response procedures are not tested. The first performance of this project sets the baseline, and subsequent tests enable the development of formal metrics to measure enhancements made between test cycles.

Network Vulnerability Assessment
The Network Vulnerability Assessment is a condensed, lower-cost alternative to both the Comprehensive Penetration Test and the IT Security Baseline. The assessment is performed with the knowledge of the IT staff. The network scope may be limited and does not include the testing of intrusion detection and response procedures.

Information on other audit and security services available upon request.