Governance and risk
Responsibilities, policies, risks and obligations
← All audits
GUIDED IT AUDIT · BELGIAN BUSINESSES
Most complete for your businessProfessional IT Audit: turn technical risk into a manageable roadmap
The Professional Audit goes beyond checking whether tools exist. It reviews governance, consistency, monitoring and evidence that controls operate effectively.
VERIFICATION SCOPE
What we audit
The exact number of checks depends on your environment. Irrelevant modules are removed and relevant checks are explored in greater depth.
5 checks
Assets, software and licences
Inventory, lifecycle, software and licences
Identity and access
Accounts, MFA, privileges and leavers
Endpoints, servers and mobile
Endpoints, servers, mobile, updates and encryption
Network and physical security
Firewall, segmentation, Wi-Fi, remote access and premises
Cloud, SaaS and email
Microsoft 365, SaaS, email and sharing
Data and privacy
Classification, retention, GDPR and transfers
Backup and continuity
Coverage, isolation, recovery and continuity
Detection and incidents
Logs, alerts, incidents and exercises
People and suppliers
Awareness, suppliers and responsibilities
Applications and development
Development, vulnerabilities and changes
OT and IoT
Connected equipment, IoT and industrial environments
THE EXPECTED OUTCOME
Turn findings into decisions
01
Understand dependencies between risks
02
Use verifiable evidence for decisions
03
Build a realistic roadmap
What you receive
- ✓Management summary and detailed report
- ✓Findings register with impact and recommendation
- ✓Prioritised roadmap
- ✓Readout with decision-makers and IT owners
A FOUR-STAGE ENGAGEMENT
How the audit works
Scoping
We confirm sites, users, equipment, cloud services, exclusions and engagement objectives.
Verification
The auditor conducts interviews, reviews authorised configurations and collects useful evidence.
Analysis
Each finding is qualified by risk, impact, urgency and confidence level.
Readout
Management receives a clear summary while teams get a detailed action plan.
THE RIGHT LEVEL OF DEPTH
Compare the three audits
Vital safeguards
Essential Audit
34 checks maximumYou want an accessible, targeted human review of your most important safeguards.
View this plan →Most complete for your business
Professional Audit
76 checks maximumYou need to decide, budget and track a documented IT or cybersecurity improvement plan.
View this plan →In-depth analysis
Extensive Audit
91 checks maximumYour environment is multi-site, complex, highly IT-dependent or subject to specific obligations.
View this plan →FAQ
Frequently asked questions
Is this a penetration test?+
No. The audit evaluates practices, configurations and evidence within scope. A penetration test is a separate engagement requiring specific authorisation.
Is the number of checks always the same?+
No. The maximum represents the full plan catalogue. We adapt checks to the technology you actually use.
Can the report be delivered in French or Dutch?+
Yes. You choose the report language independently from the language used with the auditor.
Do I need to give the auditor passwords?+
No. Access and observations are agreed before the engagement. GVISION never asks for your personal password.