IT Audit Services
Independent and objective review of your IT infrastructure
Experienced, Independent IT Auditors
Our IT audit services provide an independent and objective review of an organization’s IT infrastructure, control configuration, and regulatory compliance through in-depth testing and expert analysis. As part of our IT audit services, our team collects and evaluates evidence of your organization’s technical controls, policies and procedures, and other related documentation to ensure the availability, confidentiality, and integrity of mission-critical systems and data. Our team works directly with yours to ensure efficiency throughout the audit process.
GraVoc’s auditors maintain several professional certifications, including Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP). Our IT audit service area expands throughout Massachusetts, Southern New Hampshire, and New England but are not limited to these states.
Benefits of IT Audit Services Include:
Identify and remediate control gaps
Evaluate and enhance security controls to properly protect sensitive IT and information assets
Ensure compliance with data security, privacy, and cybersecurity regulations
Improve your organization’s overall security posture
GraVoc’s IT Audit Control Domains
While the IT audit scope is constantly expanding and depends primarily on the nature and complexity of the client’s operation, GraVoc’s IT audit process analyzes five fundamental control domains. These include:
Management & Oversight
Our team will review your overall IT organization, including IT management practices, defined authority and responsibility among personnel, strategic planning, and audit resolution tracking, to determine the adequacy of existing controls.
Network Security & General Systems Controls
For this domain analysis, our team will review access controls and security configurations on your local and wide area network. Our team will also evaluate controls relevant to IT governance and the physical security of IT equipment.
Policies & Procedures
To evaluate the reliability and efficiency of controls under this domain, our team will assess the policies and procedures pertaining to the use and management of your IT infrastructure, including your disaster recovery/business continuity plan, incident response, and information security program.
Our team will verify the adequacy of controls within your organization’s mission-critical business applications and service delivery channels.
Third-Party Technology Service Providers
Here, our team will review your vendor relationship management practices for third-party technology service providers and assess current controls to manage risks associated with these partnerships.
Our certifications include…
Cisco Certified Network Associate Security
Certified Information Security Manager
Certified Information Systems Auditor
Certified in Risk and Information Systems Control
Certified Ethical Hacker
Certified Information Systems Security Professional
EC-Council Certified Incident Handler
Microsoft Certified Professional
By the Numbers
Professional Security Certifications
Common Goal: YOUR SUCCESS!
GET IN TOUCH
Have a question or want to discuss our IT Audit services? Contact a GraVoc employee below by filling out the form!
Information Security News
Information Technology Audit Service Area
GraVoc is located in Peabody Massachusetts, just north of Boston, and provides Information Security services including IT Audit, IT General Controls Audit and Compliance Gap Analysis to businesses and organzations in the New England area. GraVoc’s Information Security Auditors hold certifications in CCNA Security, CISM, CISA, CRISC, C|EH, CISSP, and E|CIH. Below is a list of our Massachusetts and New Hampshire IT Audit service area. GraVoc also provides IT Audit services in Connecticut, Maine, Rhode Island and Vermont but are not limited to these states.
Massachusetts IT Audit service area:
Acton, Amesbury, Andover, Arlington, Ashby, Ashland, Ayer, Bedford, Belmont, Beverly, Billerica, Boston, Boxborough, Boxford, Burlington, Cambridge, Carlisle, Chelmsford, Chelsea, Concord, Danvers, Dracut, Dunstable, East Boston, Essex, Everett, Framingham, Georgetown, Gloucester, Groton, Groveland, Hamilton, Haverhill, Holliston, Hopkinton, Hudson, Ipswich, Lawrence, Lexington, Lincoln, Littleton, Lowell, Lynn, Lynnfield, Malden, Manchester by the sea, Marblehead, Marlborough, Maynard, Medford, Melrose, Merrimac, Methuen, Middleton, Nahant, Natick, Newbury, Newburyport, Newton, North Andover, North Reading, Peabody, Pepperell, Reading, Revere, Rockport, Rowley, Salem, Salisbury, Saugus, Sherborn, Shirley, Somerville, Stoneham, Stow, South Boston, Sudbury, Swampscott, Tewksbury, Topsfield, Townsend, Tyngsborough, Wakefield, Waltham, Watertown, Wayland, Wenham, West Newbury, Westford, Weston, Wilmington, Winchester, Winthrop and Woburn.
Our Massachusetts IT Audit service area also includes: Barnstable County, Berkshire County, Bristol County, Dukes County, Franklin County, Hamden County, Hampshire County, Nantucket County, Norfolk County, Plymouth County and Worcester County.
New Hampshire IT Audit service area:
Amherst, Andover, Atkinson, Auburn, Boscawen, Bow, Bradford, Brentwood, Candia, Canterbury, Chester, Concord, Danbury, Danville, Deerfield, Derry, Dunbarton, East Kingston, Epping, Epsom, Exeter, Franklin, Fremont, Greenland, Hampstead, Hampton Falls, Hampton, Henniker, Hill, Hooksett, Hopkinton, Kensington, Kingston, Loudon, Lyndeborough, New Castle, New London, Newbury, Newfields, Newington, Newmarket, Newton, Northfield, North Hampton, Northwood, Nottingham, Pembroke, Pittsfield, Plaistow, Portsmouth, Raymond, Rye, Salem, Salisbury, Sandown, Seabrook, South Hampton, Stratham, Sutton, Warner, Webster, Wilmot and Windham.
Our New Hampshire IT Audit service area also includes: Hillsborough County, Rockingham County and Cheshire County.
GraVoc is a technology-consulting firm located in Peabody, Massachusetts just north of Boston. GraVoc is committed to solving business problems for customers through the development, implementation, and support of technology-based solutions.
"One Company, Many Solutions"