​
​
IT Secu​​rity Audit​
The IT ​Security Unit manages and conducts IT security audits in Ministries and Departments to assess the security level of their IT infrastructure and information systems.
 
These security audits result in the enhancement of the security posture of Government information systems and improvement of the IT infrastructure.
 
​The following types​ of security audits are overseen and managed by the IT Security Unit: 

::  Application Security Audit of complex and critical Government Information System

::  Vulnerability Assessment of IT networks in Ministries and Departments

::  IT Secur​ity Audits based on information security standards and best practices

::  Internal Audits of ISMSs​​


​A Ministry-wise IT security assessment exercise has been planned to cover 25 Ministries over the next 3 years. A circular memorandum has been officially issued to all Ministries in Government requiring the identification of a senior Management representative to act as liaison for audit planning of the Ministry and its related departments.  This ensures top-level commitment for the systematic process of the conduct of audits.  The Management representatives have been nominated and the audits are ongoing at over 40 sites depending on site readiness.​